Apps: Grant sufficient permissions to the filesystem opened by fileSystem API

chrome/browser/extensions/api/file_handlers/app_file_handler_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/file_handlers/app_file_handler_util.h"
 
 #include "base/file_util.h"
 #include "base/files/file_path.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/child_process_security_policy.h"
@@ skipping 315 matching lines @@
   DCHECK(isolated_context);
 
   result.filesystem_id = isolated_context->RegisterFileSystemForPath(
       fileapi::kFileSystemTypeNativeForPlatformApp, path,
       &result.registered_name);
 
   content::ChildProcessSecurityPolicy* policy =
       content::ChildProcessSecurityPolicy::GetInstance();
   policy->GrantReadFileSystem(renderer_id, result.filesystem_id);
   if (HasFileSystemWritePermission(extension)) {
-    policy->GrantWriteFileSystem(renderer_id, result.filesystem_id);
-    policy->GrantDeleteFromFileSystem(renderer_id, result.filesystem_id);
-    if (is_directory)
-      policy->GrantCreateFileForFileSystem(renderer_id, result.filesystem_id);
+    if (is_directory) {
+      policy->GrantCreateReadWriteFileSystem(renderer_id, result.filesystem_id);
+    } else {
+      policy->GrantWriteFileSystem(renderer_id, result.filesystem_id);
+      policy->GrantDeleteFromFileSystem(renderer_id, result.filesystem_id);
+    }
   }
 
   result.id = result.filesystem_id + ":" + result.registered_name;
   return result;
 }
 
 void CheckWritableFiles(
     const std::vector<base::FilePath>& paths,
     Profile* profile,
     bool is_directory,
@@ skipping 58 matching lines @@
     *error = kInvalidParameters;
     return false;
   }
 
   return true;
 }
 
 }  // namespace app_file_handler_util
 
 }  // namespace extensions