ChildProcessSecurityPolicy: Add DeleteFromFileSystem permission.

chrome/browser/extensions/api/file_handlers/app_file_handler_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/file_handlers/app_file_handler_util.h"
 
 #include "base/file_util.h"
 #include "base/files/file_path.h"
 #include "chrome/browser/extensions/extension_prefs.h"
 #include "content/public/browser/browser_thread.h"
@@ skipping 295 matching lines @@
 
   result.filesystem_id = isolated_context->RegisterFileSystemForPath(
       fileapi::kFileSystemTypeNativeForPlatformApp, path,
       &result.registered_name);
 
   content::ChildProcessSecurityPolicy* policy =
       content::ChildProcessSecurityPolicy::GetInstance();
   policy->GrantReadFileSystem(renderer_id, result.filesystem_id);
   if (HasFileSystemWritePermission(extension)) {
     policy->GrantWriteFileSystem(renderer_id, result.filesystem_id);
+    policy->GrantDeleteFromFileSystem(renderer_id, result.filesystem_id);
     if (is_directory)
       policy->GrantCreateFileForFileSystem(renderer_id, result.filesystem_id);
   }
 
   result.id = result.filesystem_id + ":" + result.registered_name;
   return result;
 }
 
 void CheckWritableFiles(
     const std::vector<base::FilePath>& paths,
     Profile* profile,
     bool is_directory,
     const base::Closure& on_success,
     const base::Callback<void(const base::FilePath&)>& on_failure) {
   scoped_refptr<WritableFileChecker> checker(new WritableFileChecker(
       paths, profile, is_directory, on_success, on_failure));
   checker->Check();
 }
 
 GrantedFileEntry::GrantedFileEntry() {}
 
 bool HasFileSystemWritePermission(const Extension* extension) {
   return extension->HasAPIPermission(APIPermission::kFileSystemWrite);
 }
 
 }  // namespace app_file_handler_util
 
 }  // namespace extensions