PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/extensions/permissions_updater_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/permissions_updater.h"
 
 #include <utility>
 
 #include "base/files/file_path.h"
 #include "base/json/json_file_value_serializer.h"
@@ skipping 115 matching lines @@
                       "manifest.json",
                       Manifest::INTERNAL,
                       Extension::NO_FLAGS);
 }
 
 void AddPattern(URLPatternSet* extent, const std::string& pattern) {
   int schemes = URLPattern::SCHEME_ALL;
   extent->AddPattern(URLPattern(schemes, pattern));
 }
 
+class PermissionsUpdaterTestDelegate : public PermissionsUpdater::Delegate {
+ public:
+  PermissionsUpdaterTestDelegate() {}
+  ~PermissionsUpdaterTestDelegate() override {}
+
+  // PermissionsUpdater::Delegate
+  void InitializePermissions(
+      const Extension* extension,
+      std::unique_ptr<const PermissionSet>* granted_permissions) override {
+    // Remove the cookie permission.
+    APIPermissionSet api_permission_set((*granted_permissions)->apis());
+    api_permission_set.erase(APIPermission::kCookie);
+    granted_permissions->reset(
+        new PermissionSet(api_permission_set, ManifestPermissionSet(),
+                          URLPatternSet(), URLPatternSet()));
+  }
+
+ private:
+  DISALLOW_COPY_AND_ASSIGN(PermissionsUpdaterTestDelegate);
+};
+
 }  // namespace
 
 // Test that the PermissionUpdater can correctly add and remove active
 // permissions. This tests all of PermissionsUpdater's public methods because
 // GrantActivePermissions and SetPermissions are used by AddPermissions.
 TEST_F(PermissionsUpdaterTest, AddAndRemovePermissions) {
   InitializeEmptyExtensionService();
 
   // Load the test extension.
   scoped_refptr<Extension> extension = LoadOurManifest();
@@ skipping 209 matching lines @@
     EXPECT_FALSE(extension->permissions_data()
                      ->active_permissions()
                      .HasExplicitAccessToOrigin(kOrigin));
     EXPECT_TRUE(extension->permissions_data()
                     ->withheld_permissions()
                     .HasExplicitAccessToOrigin(kOrigin));
     EXPECT_TRUE(updater.GetRevokablePermissions(extension.get())->IsEmpty());
   }
 }
 
+// Test that the permissions updater delegate works - in this test it removes
+// the cookies permission.
+TEST_F(PermissionsUpdaterTest, Delegate) {
+  InitializeEmptyExtensionService();
+
+  ListBuilder required_permissions;
+  required_permissions.Append("tabs").Append("management").Append("cookies");
+  scoped_refptr<const Extension> extension =
+      CreateExtensionWithOptionalPermissions(
+          base::MakeUnique<base::ListValue>(),
+          required_permissions.Build(),
+          "My Extension");
+
+  auto test_delegate = base::MakeUnique<PermissionsUpdaterTestDelegate>();
+  PermissionsUpdater::SetPlatformDelegate(test_delegate.get());
+  PermissionsUpdater updater(profile());
+  updater.InitializePermissions(extension.get());
+
+  EXPECT_TRUE(extension->permissions_data()->HasAPIPermission(
+      APIPermission::kTab));
+  EXPECT_TRUE(extension->permissions_data()->HasAPIPermission(
+      APIPermission::kManagement));
+  EXPECT_FALSE(extension->permissions_data()->HasAPIPermission(
+      APIPermission::kCookie));
+
+  // Unset the delegate.
+  PermissionsUpdater::SetPlatformDelegate(nullptr);
+}
+
 }  // namespace extensions