Whitelisted mediaGalleries and usbDevices permission dicts

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 670 matching lines @@
     // server-side or via chrome.socket. Finally, web security doesn't make a
     // lot of sense when there's no URL bar or HTTPS padlock providing trusted
     // UI. Bottom line: Risks are mitigated, further restrictions don't make
     // sense, so OK to allow.
     "webview",
 };
 
 // Some permissions take the form of a dictionary.  See |kSafePermissionStrings|
 // for permission strings (and for more documentation).
 const char* const kSafePermissionDicts[] = {
-    // Dictionary form of the above "fileSystem" permission string.
+    // Dictionary forms of the above permission strings.
     "fileSystem",
-
-    // Just another type of connectivity.
+    "mediaGalleries",
     "socket",
+    "usbDevices",
 };
 
 // List of safe entries for the "app" dict in manifest.
 const char* const kSafeAppStrings[] = {
     "background",
     "content_security_policy",
     "icon_color",
     "isolation",
     "launch",
     "linked_icons",
@@ skipping 233 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos