Media Galleries: Disable write support.

chrome/browser/extensions/api/media_galleries/media_galleries_api.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Implements the Chrome Extensions Media Galleries API.
 
 #include "chrome/browser/extensions/api/media_galleries/media_galleries_api.h"
 
 #include <set>
 #include <string>
@@ skipping 125 matching lines @@
     const std::vector<MediaFileSystemInfo>& filesystems) {
   content::RenderViewHost* rvh = render_view_host();
   if (!rvh) {
     SendResponse(false);
     return;
   }
   MediaGalleriesPermission::CheckParam read_param(
       MediaGalleriesPermission::kReadPermission);
   bool has_read_permission = GetExtension()->CheckAPIPermissionWithParam(
       APIPermission::kMediaGalleries, &read_param);
-  MediaGalleriesPermission::CheckParam write_param(
-      MediaGalleriesPermission::kWritePermission);
-  bool has_write_permission = GetExtension()->CheckAPIPermissionWithParam(
-      APIPermission::kMediaGalleries, &write_param);
 
   const int child_id = rvh->GetProcess()->GetID();
   std::set<std::string> file_system_names;
   base::ListValue* list = new base::ListValue();
   for (size_t i = 0; i < filesystems.size(); i++) {
     scoped_ptr<base::DictionaryValue> file_system_dict_value(
         new base::DictionaryValue());
 
     // Send the file system id so the renderer can create a valid FileSystem
     // object.
@@ skipping 18 matching lines @@
     file_system_dict_value->SetBooleanWithoutPathExpansion(
         kIsRemovableKey, filesystems[i].removable);
     file_system_dict_value->SetBooleanWithoutPathExpansion(
         kIsMediaDeviceKey, filesystems[i].media_device);
 
     list->Append(file_system_dict_value.release());
 
     if (filesystems[i].path.empty())
       continue;
 
-    if (has_read_permission || has_write_permission) {
+    if (has_read_permission) {
       content::ChildProcessSecurityPolicy* policy =
           ChildProcessSecurityPolicy::GetInstance();
       if (!policy->CanReadFile(child_id, filesystems[i].path))
         policy->GrantReadFile(child_id, filesystems[i].path);
       policy->GrantReadFileSystem(child_id, filesystems[i].fsid);
-      if (has_write_permission) {
-        policy->GrantWriteFileSystem(child_id, filesystems[i].fsid);
-        policy->GrantCreateFileForFileSystem(child_id, filesystems[i].fsid);
-      }
     }
   }
 
   SetResult(list);
   SendResponse(true);
 }
 
 void MediaGalleriesGetMediaFileSystemsFunction::ShowDialog() {
   WebContents* contents = WebContents::FromRenderViewHost(render_view_host());
   WebContentsModalDialogManager* web_contents_modal_dialog_manager =
@@ skipping 40 matching lines @@
 bool MediaGalleriesAssembleMediaFileFunction::RunImpl() {
   if (!ApiIsAccessible(&error_))
     return false;
 
   // TODO(vandebo) Update the metadata and return the new file.
   SetResult(base::Value::CreateNullValue());
   return true;
 }
 
 }  // namespace extensions