ChildProcessSecurityPolicy: Port FileAPIMessageFilter to use new checks

content/browser/fileapi/fileapi_message_filter.h

Index: content/browser/fileapi/fileapi_message_filter.h
diff --git a/content/browser/fileapi/fileapi_message_filter.h b/content/browser/fileapi/fileapi_message_filter.h
index 873d01063fc23fe44c754c85e5dd1cf19a98515a..8f96f8425f67ab30306689671c792bfd20dc3576 100644
--- a/content/browser/fileapi/fileapi_message_filter.h
+++ b/content/browser/fileapi/fileapi_message_filter.h
@@ -49,6 +49,7 @@ class ShareableFileReference;
 }
 
 namespace content {
+class ChildProcessSecurityPolicyImpl;
 class ChromeBlobStorageContext;
 
 // TODO(tyoshino): Factor out code except for IPC gluing from
@@ -119,7 +120,9 @@ class CONTENT_EXPORT FileAPIMessageFilter : public BrowserMessageFilter {
                    const base::Time& last_access_time,
                    const base::Time& last_modified_time);
   void OnCancel(int request_id, int request_to_cancel);
-  void OnOpenFile(int request_id, const GURL& path, int file_flags);
+#if defined(ENABLE_PLUGINS)
+  void OnOpenPepperFile(int request_id, const GURL& path, int pp_open_flags);
+#endif  // defined(ENABLE_PLUGINS)
   void OnNotifyCloseFile(int file_open_id);
   void OnWillUpdate(const GURL& path);
   void OnDidUpdate(const GURL& path, int64 delta);
@@ -192,11 +195,6 @@ class CONTENT_EXPORT FileAPIMessageFilter : public BrowserMessageFilter {
       const base::FilePath& platform_path,
       const scoped_refptr<webkit_blob::ShareableFileReference>& file_ref);
 
-  // Checks renderer's access permissions for single file.
-  bool HasPermissionsForFile(const fileapi::FileSystemURL& url,
-                             int permissions,
-                             base::PlatformFileError* error);
-
   // Retrieves the Stream object for |url| from |stream_context_|. Returns unset
   // scoped_refptr when there's no Stream instance for the given |url|
   // registered with stream_context_->registry().
@@ -209,6 +207,7 @@ class CONTENT_EXPORT FileAPIMessageFilter : public BrowserMessageFilter {
   int process_id_;
 
   fileapi::FileSystemContext* context_;
+  ChildProcessSecurityPolicyImpl* security_policy_;

[Tom Sepez, 2013/09/04 22:22:45]

Why do we need to cache this rather than calling CPSPI::GetInstance()?

[tommycli, 2013/09/04 23:21:27]

No reason other than to try to contain the SLOC bloat.

 
   // Keeps map from request_id to OperationID for ongoing operations.
   // (Primarily for Cancel operation)