Restricts node/view deletion to creator

mojo/services/view_manager/view_manager_connection.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef MOJO_SERVICES_VIEW_MANAGER_VIEW_MANAGER_CONNECTION_H_
 #define MOJO_SERVICES_VIEW_MANAGER_VIEW_MANAGER_CONNECTION_H_
 
 #include <set>
 #include <vector>
 
@@ skipping 27 matching lines @@
  public:
   ViewManagerConnection(RootNodeManager* root_node_manager);
   virtual ~ViewManagerConnection();
 
   virtual void OnConnectionEstablished() MOJO_OVERRIDE;
   virtual void OnConnectionError() MOJO_OVERRIDE;
 
   TransportConnectionId id() const { return id_; }
 
   // Returns the Node with the specified id.
-  Node* GetNode(const NodeId& id);
+  Node* GetNode(const NodeId& id) {
+    return const_cast<Node*>(
+        const_cast<const ViewManagerConnection*>(this)->GetNode(id));
+  }
+  const Node* GetNode(const NodeId& id) const;
 
   // Returns the View with the specified id.
   View* GetView(const ViewId& id);
 
   // The following methods are invoked after the corresponding change has been
   // processed. They do the appropriate bookkeeping and update the client as
   // necessary.
   void ProcessNodeHierarchyChanged(const Node* node,
                                    const Node* new_parent,
                                    const Node* old_parent,
                                    TransportChangeId server_change_id,
                                    bool originated_change);
   void ProcessNodeViewReplaced(const Node* node,
                                const View* new_view,
                                const View* old_view,
                                bool originated_change);
   void ProcessNodeDeleted(const NodeId& node,
                           TransportChangeId server_change_id,
                           bool originated_change);
   void ProcessViewDeleted(const ViewId& view, bool originated_change);
 
  private:
   typedef std::map<TransportConnectionSpecificNodeId, Node*> NodeMap;
   typedef std::map<TransportConnectionSpecificViewId, View*> ViewMap;
   typedef base::hash_set<TransportNodeId> NodeIdSet;
 
+  // Returns true if this connection is allowed to delete the specified node.
+  bool CanDeleteNode(const NodeId& node_id) const;
+
+  // Returns true if this connection is allowed to delete the specified view.
+  bool CanDeleteView(const ViewId& view_id) const;
+
   // Deletes a node owned by this connection. Returns true on success. |source|
   // is the connection that originated the change.
   bool DeleteNodeImpl(ViewManagerConnection* source, const NodeId& node_id);
 
   // Deletes a view owned by this connection. Returns true on success. |source|
   // is the connection that originated the change.
   bool DeleteViewImpl(ViewManagerConnection* source, const ViewId& view_id);
 
   // Sets the view associated with a node.
   bool SetViewImpl(const NodeId& node_id, const ViewId& view_id);
@@ skipping 63 matching lines @@
 
 #if defined(OS_WIN)
 #pragma warning(pop)
 #endif
 
 }  // namespace service
 }  // namespace view_manager
 }  // namespace mojo
 
 #endif  // MOJO_SERVICES_VIEW_MANAGER_VIEW_MANAGER_CONNECTION_H_