PepperFileRefHost: Port to use explicit permission grants in ChildProcessSecurityPolicy.

content/browser/renderer_host/pepper/pepper_external_file_ref_backend.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/pepper/pepper_external_file_ref_backend.h"
 
 #include "base/files/file_path.h"
 #include "base/files/file_util_proxy.h"
 #include "content/browser/child_process_security_policy_impl.h"
 #include "content/public/browser/browser_thread.h"
@@ skipping 87 matching lines @@
 }
 
 std::string PepperExternalFileRefBackend::GetFileSystemURLSpec() const {
   return std::string();
 }
 
 base::FilePath PepperExternalFileRefBackend::GetExternalPath() const {
   return path_;
 }
 
-int32_t PepperExternalFileRefBackend::HasPermissions(
-    int permissions) const {
-  if (!ChildProcessSecurityPolicyImpl::GetInstance()->HasPermissionsForFile(
-      render_process_id_, path_, permissions)) {
+int32_t PepperExternalFileRefBackend::CanRead() const {
+  if (!ChildProcessSecurityPolicyImpl::GetInstance()->
+          CanReadFile(render_process_id_, path_)) {
     return PP_ERROR_NOACCESS;
   }
   return PP_OK;
+}
+
+int32_t PepperExternalFileRefBackend::CanWrite() const {
+  if (!ChildProcessSecurityPolicyImpl::GetInstance()->
+          CanWriteFile(render_process_id_, path_)) {
+    return PP_ERROR_NOACCESS;
+  }
+  return PP_OK;
+}
+
+int32_t PepperExternalFileRefBackend::CanCreate() const {
+  if (!ChildProcessSecurityPolicyImpl::GetInstance()->
+          CanCreateFile(render_process_id_, path_)) {
+    return PP_ERROR_NOACCESS;
+  }
+  return PP_OK;
+}
+
+int32_t PepperExternalFileRefBackend::CanReadWrite() const {
+  ChildProcessSecurityPolicyImpl* policy =
+        ChildProcessSecurityPolicyImpl::GetInstance();
+  if (!policy->CanReadFile(render_process_id_, path_) ||
+      !policy->CanWriteFile(render_process_id_, path_)) {
+    return PP_ERROR_NOACCESS;
+  }
+  return PP_OK;
 }
 
 void PepperExternalFileRefBackend::DidFinish(
     ppapi::host::ReplyMessageContext reply_context,
     const IPC::Message& msg,
     base::PlatformFileError error) {
   reply_context.params.set_result(ppapi::PlatformFileErrorToPepperError(error));
   host_->SendReply(reply_context, msg);
 }
 
 void PepperExternalFileRefBackend::GetMetadataComplete(
     ppapi::host::ReplyMessageContext reply_context,
     const base::PlatformFileError error,
     const base::PlatformFileInfo& file_info) {
   reply_context.params.set_result(ppapi::PlatformFileErrorToPepperError(error));
 
   PP_FileInfo pp_file_info;
   if (error == base::PLATFORM_FILE_OK) {
     ppapi::PlatformFileInfoToPepperFileInfo(
         file_info, PP_FILESYSTEMTYPE_EXTERNAL, &pp_file_info);
   } else {
     memset(&pp_file_info, 0, sizeof(pp_file_info));
   }
 
   host_->SendReply(reply_context,
                    PpapiPluginMsg_FileRef_QueryReply(pp_file_info));
 }
 
 }  // namespace content