Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(738)

Side by Side Diff: content/public/browser/child_process_security_policy.h

Issue 31663002: ChildProcessSecurityPolicy: Add DeleteFromFileSystem permission. (Closed) Base URL: svn://chrome-svn/chrome/trunk/src/
Patch Set: Created 7 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « content/browser/fileapi/fileapi_message_filter.cc ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ 5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ 6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
7 7
8 #include <string> 8 #include <string>
9 9
10 #include "base/basictypes.h" 10 #include "base/basictypes.h"
(...skipping 89 matching lines...) Expand 10 before | Expand all | Expand 10 after
100 virtual void GrantCreateFileForFileSystem( 100 virtual void GrantCreateFileForFileSystem(
101 int child_id, 101 int child_id,
102 const std::string& filesystem_id) = 0; 102 const std::string& filesystem_id) = 0;
103 103
104 // Grants permission to copy-into filesystem |filesystem_id|. 'copy-into' 104 // Grants permission to copy-into filesystem |filesystem_id|. 'copy-into'
105 // is used to allow copying files into the destination filesystem without 105 // is used to allow copying files into the destination filesystem without
106 // granting more general create and write permissions. 106 // granting more general create and write permissions.
107 virtual void GrantCopyIntoFileSystem(int child_id, 107 virtual void GrantCopyIntoFileSystem(int child_id,
108 const std::string& filesystem_id) = 0; 108 const std::string& filesystem_id) = 0;
109 109
110 // Grants permission to delete from filesystem |filesystem_id|. 'delete-from'
111 // is used to allow deleting files into the destination filesystem without
112 // granting more general create and write permissions.
113 virtual void GrantDeleteFromFileSystem(int child_id,
114 const std::string& filesystem_id) = 0;
115
110 // Grants the child process the capability to access URLs of the provided 116 // Grants the child process the capability to access URLs of the provided
111 // scheme. 117 // scheme.
112 virtual void GrantScheme(int child_id, const std::string& scheme) = 0; 118 virtual void GrantScheme(int child_id, const std::string& scheme) = 0;
113 119
114 // Returns true if read access has been granted to |filesystem_id|. 120 // Returns true if read access has been granted to |filesystem_id|.
115 virtual bool CanReadFileSystem(int child_id, 121 virtual bool CanReadFileSystem(int child_id,
116 const std::string& filesystem_id) = 0; 122 const std::string& filesystem_id) = 0;
117 123
118 // Returns true if read and write access has been granted to |filesystem_id|. 124 // Returns true if read and write access has been granted to |filesystem_id|.
119 virtual bool CanReadWriteFileSystem(int child_id, 125 virtual bool CanReadWriteFileSystem(int child_id,
120 const std::string& filesystem_id) = 0; 126 const std::string& filesystem_id) = 0;
121 127
122 // Returns true if copy-into access has been granted to |filesystem_id|. 128 // Returns true if copy-into access has been granted to |filesystem_id|.
123 virtual bool CanCopyIntoFileSystem(int child_id, 129 virtual bool CanCopyIntoFileSystem(int child_id,
124 const std::string& filesystem_id) = 0; 130 const std::string& filesystem_id) = 0;
131
132 // Returns true if delete-from access has been granted to |filesystem_id|.
133 virtual bool CanDeleteFromFileSystem(int child_id,
134 const std::string& filesystem_id) = 0;
125 }; 135 };
126 136
127 }; // namespace content 137 }; // namespace content
128 138
129 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ 139 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
OLDNEW
« no previous file with comments | « content/browser/fileapi/fileapi_message_filter.cc ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698