Create withheld permissions

chrome/browser/extensions/active_tab_permission_granter.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/active_tab_permission_granter.h"
 
 #include "chrome/browser/extensions/active_script_controller.h"
 #include "chrome/browser/profiles/profile.h"
 #include "content/public/browser/navigation_details.h"
 #include "content/public/browser/navigation_entry.h"
@@ skipping 27 matching lines @@
   web_contents()->UserGestureDone();
 
   if (granted_extensions_.Contains(extension->id()))
     return;
 
   APIPermissionSet new_apis;
   URLPatternSet new_hosts;
 
   const PermissionsData* permissions_data = extension->permissions_data();
 
-  // If the extension requires action for script execution, we grant it
+  // If the extension requested all-hosts but has had it withheld, we grant it
   // active tab-style permissions, even if it doesn't have the activeTab
   // permission in the manifest.
-  // We don't take tab id into account, because we want to know if the extension
-  // should require active tab in general (not for the current tab).
-  bool requires_action_for_script_execution =
-      permissions_data->RequiresActionForScriptExecution(extension,
-                                                         -1,  // No tab id.
-                                                         GURL());
-
-  if (extension->permissions_data()->HasAPIPermission(
-          APIPermission::kActiveTab) ||
-      requires_action_for_script_execution) {
+  if (permissions_data->HasAPIPermission(APIPermission::kActiveTab) ||
+      permissions_data->HasWithheldImpliedAllHosts()) {
     URLPattern pattern(UserScript::ValidUserScriptSchemes());
     // Pattern parsing could fail if this is an unsupported URL e.g. chrome://.
     if (pattern.Parse(web_contents()->GetURL().spec()) ==
             URLPattern::PARSE_SUCCESS) {
       new_hosts.AddPattern(pattern);
     }
     new_apis.insert(APIPermission::kTab);
   }
 
-  if (extension->permissions_data()->HasAPIPermission(
-          APIPermission::kTabCapture))
+  if (permissions_data->HasAPIPermission(APIPermission::kTabCapture))
     new_apis.insert(APIPermission::kTabCaptureForTab);
 
   if (!new_apis.empty() || !new_hosts.is_empty()) {
     granted_extensions_.Insert(extension);
     scoped_refptr<const PermissionSet> new_permissions =
         new PermissionSet(new_apis, ManifestPermissionSet(),
                           new_hosts, URLPatternSet());
     permissions_data->UpdateTabSpecificPermissions(tab_id_, new_permissions);
     const content::NavigationEntry* navigation_entry =
         web_contents()->GetController().GetVisibleEntry();
@@ skipping 46 matching lines @@
        it != granted_extensions_.end(); ++it) {
     it->get()->permissions_data()->ClearTabSpecificPermissions(tab_id_);
     extension_ids.push_back((*it)->id());
   }
 
   Send(new ExtensionMsg_ClearTabSpecificPermissions(tab_id_, extension_ids));
   granted_extensions_.Clear();
 }
 
 }  // namespace extensions