Pass CapabilityFilter via CreateInstanceForHandle

mojo/application/public/interfaces/application_manager.mojom

Index: mojo/application/public/interfaces/application_manager.mojom
diff --git a/mojo/shell/application_manager.mojom b/mojo/application/public/interfaces/application_manager.mojom
similarity index 54%
rename from mojo/shell/application_manager.mojom
rename to mojo/application/public/interfaces/application_manager.mojom
index fbd2be76fea780f71899e4e72ae0834511b9e214..9403e3b9b8307766765a75997ba70bbac91d6f37 100644
--- a/mojo/shell/application_manager.mojom
+++ b/mojo/application/public/interfaces/application_manager.mojom
@@ -4,17 +4,15 @@
 
 module mojo.shell.mojom;
 
+import "mojo/application/public/interfaces/shell.mojom";
+
 interface ApplicationManager {
   // Instructs the ApplicationManager to create an instance for an existing
   // process at the other end of |channel|, and perform applicable
   // initialization. This assumes the target process will bind the other end of
   // channel to an implementation of ChildController and bind an Application
   // request there.
-  // TODO(beng): we should probably have an Identity mojom struct.
-  // TODO(beng): for this to be used in production, it's going to have to take
-  //             a fully qualified Identity complete with CapabilityFilter,
-  //             otherwise child processes registered with the shell will be
-  //             able to request any application/service.
-  //             http://crbug.com/555392
-  CreateInstanceForHandle(handle channel, string url);
+  CreateInstanceForHandle(handle channel,
+                          string url,
+                          mojo.CapabilityFilter? filter);

[sky, 2015/11/22 15:27:31]

Document the capabilities a null filter gets.

 };