Restricts node/view deletion to creator

mojo/services/public/interfaces/view_manager/view_manager.mojom

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 module mojo.view_manager {
 
 struct INode {
   uint32 parent_id;
   uint32 node_id;
   uint32 view_id;
@@ skipping 11 matching lines @@
 // The root node is identified with a connection id of 0, and value of 1.
 [Client=IViewManagerClient]
 interface IViewManager {
   // Creates a new node with the specified id. It is up to the client to ensure
   // the id is unique to the connection (the id need not be globally unique).
   // Additionally the connection id (embedded in |node_id|) must match that of
   // the connection.
   CreateNode(uint32 node_id) => (bool success);
 
   // Deletes a node. This does not recurse. No hierarchy change notifications
-  // are sent as a result of this. Deletion is always allowed and implicitly
-  // advances |server_change_id|.
+  // are sent as a result of this. Only the connection that created the node can
+  // delete it.
   DeleteNode(uint32 node_id) => (bool success);
 
   // Reparents a node. See description above class for details of |change_id|.
   // This fails for any of the following reasons:
   // . |server_change_id| is not the expected id.
   // . |parent| or |child| does not identify a valid node.
   // . |child| is an ancestor of |parent|.
   // . |child| is already a child of |parent|.
   AddNode(uint32 parent,
           uint32 child,
@@ skipping 10 matching lines @@
   // case an empty vector is returned. The nodes are visited using a depth first
   // search (pre-order).
   GetNodeTree(uint32 node_id) => (INode[] nodes);
 
   // Creates a new view with the specified id. It is up to the client to ensure
   // the id is unique to the connection (the id need not be globally unique).
   // Additionally the connection id (embedded in |view_id|) must match that of
   // the connection.
   CreateView(uint32 view_id) => (bool success);
 
-  // Deletes the view with the specified id.
+  // Deletes the view with the specified id. Only the connection that created
+  // the view can delete it.
   DeleteView(uint32 view_id) => (bool success);
 
   // Sets the view a node is showing.
   SetView(uint32 node_id, uint32 view_id) => (bool success);
 
   // Shows the specified image (png encoded) in the specified view.
   SetViewContents(uint32 view_id,
                   handle<shared_buffer> buffer,
                   uint32 buffer_size);
 };
@@ skipping 35 matching lines @@
 
   // Invoked when the view associated with a node is replaced by another view.
   // 0 is used to identify a null view.
   OnNodeViewReplaced(uint32 node, uint32 new_view_id, uint32 old_view_id);
 
   // Invoked when a view is deleted.
   OnViewDeleted(uint32 view);
 };
 
 }