Adds an AccessPolicy that is queried to determine what a connection can do

mojo/services/view_manager/default_access_policy.h

Index: mojo/services/view_manager/default_access_policy.h
diff --git a/mojo/services/view_manager/default_access_policy.h b/mojo/services/view_manager/default_access_policy.h
new file mode 100644
index 0000000000000000000000000000000000000000..370d22c5d23512a5f88d1639a70059aa4b50c35a
--- /dev/null
+++ b/mojo/services/view_manager/default_access_policy.h
@@ -0,0 +1,63 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef MOJO_SERVICES_VIEW_MANAGER_DEFAULT_ACCESS_POLICY_H_
+#define MOJO_SERVICES_VIEW_MANAGER_DEFAULT_ACCESS_POLICY_H_
+
+#include "base/basictypes.h"
+#include "mojo/services/view_manager/access_policy.h"
+
+namespace mojo {
+namespace service {
+
+class AccessPolicyDelegate;
+
+// AccessPolicy for all connections, except the window manager.
+class DefaultAccessPolicy : public AccessPolicy {
+ public:
+  DefaultAccessPolicy(ConnectionSpecificId connection_id,
+                      AccessPolicyDelegate* delegate);
+  virtual ~DefaultAccessPolicy();
+
+  // AccessPolicy:
+  virtual bool CanRemoveNodeFromParent(const Node* node) const OVERRIDE;
+  virtual bool CanAddNode(const Node* parent, const Node* child) const OVERRIDE;
+  virtual bool CanReorderNode(const Node* node,
+                              const Node* relative_node,
+                              OrderDirection direction) const OVERRIDE;
+  virtual bool CanDeleteNode(const Node* node) const OVERRIDE;
+  virtual bool CanDeleteView(const View* view) const OVERRIDE;
+  virtual bool CanSetView(const Node* node, const View* view) const OVERRIDE;
+  virtual bool CanSetFocus(const Node* node) const OVERRIDE;
+  virtual bool CanGetNodeTree(const Node* node) const OVERRIDE;
+  virtual bool CanDescendIntoNodeForNodeTree(const Node* node) const OVERRIDE;
+  virtual bool CanEmbed(const Node* node) const OVERRIDE;
+  virtual bool CanChangeNodeVisibility(const Node* node) const OVERRIDE;
+  virtual bool CanSetViewContents(const View* view) const OVERRIDE;
+  virtual bool CanSetNodeBounds(const Node* node) const OVERRIDE;
+  virtual bool ShouldNotifyOnHierarchyChange(
+      const Node* node,
+      const Node** new_parent,
+      const Node** old_parent) const OVERRIDE;
+  virtual Id GetViewIdToSend(const Node* node, const View* view) const OVERRIDE;
+  virtual bool ShouldSendViewDeleted(const ViewId& view_id) const OVERRIDE;
+
+ private:
+  bool IsNodeInRoots(const Node* node) const;
+
+  template <typename T>
+  bool WasCreatedByThisConnection(const T* t) const {
+    return t->id().connection_id == connection_id_;
+  }
+
+  const ConnectionSpecificId connection_id_;
+  AccessPolicyDelegate* delegate_;
+
+  DISALLOW_COPY_AND_ASSIGN(DefaultAccessPolicy);
+};
+
+}  // namespace service
+}  // namespace mojo
+
+#endif  // MOJO_SERVICES_VIEW_MANAGER_DEFAULT_ACCESS_POLICY_H_