OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 | 9 |
10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
(...skipping 79 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
90 // identified by |filesystem_id|. See comments for GrantReadFileSystem | 90 // identified by |filesystem_id|. See comments for GrantReadFileSystem |
91 // for more details. You do NOT need to give direct permission to | 91 // for more details. You do NOT need to give direct permission to |
92 // individual file paths. | 92 // individual file paths. |
93 // | 93 // |
94 // This must be called with a great care as this gives create permission | 94 // This must be called with a great care as this gives create permission |
95 // within all directories included in the file system. | 95 // within all directories included in the file system. |
96 virtual void GrantCreateFileForFileSystem( | 96 virtual void GrantCreateFileForFileSystem( |
97 int child_id, | 97 int child_id, |
98 const std::string& filesystem_id) = 0; | 98 const std::string& filesystem_id) = 0; |
99 | 99 |
| 100 // Grants create, read and write access permissions to the given isolated |
| 101 // file system identified by |filesystem_id|. See comments for |
| 102 // GrantReadFileSystem for more details. You do NOT need to give direct |
| 103 // permission to individual file paths. |
| 104 // |
| 105 // This must be called with a great care as this gives create, read and write |
| 106 // permissions to all files/directories included in the file system. |
| 107 virtual void GrantCreateReadWriteFileSystem( |
| 108 int child_id, |
| 109 const std::string& filesystem_id) = 0; |
| 110 |
100 // Grants permission to copy-into filesystem |filesystem_id|. 'copy-into' | 111 // Grants permission to copy-into filesystem |filesystem_id|. 'copy-into' |
101 // is used to allow copying files into the destination filesystem without | 112 // is used to allow copying files into the destination filesystem without |
102 // granting more general create and write permissions. | 113 // granting more general create and write permissions. |
103 virtual void GrantCopyIntoFileSystem(int child_id, | 114 virtual void GrantCopyIntoFileSystem(int child_id, |
104 const std::string& filesystem_id) = 0; | 115 const std::string& filesystem_id) = 0; |
105 | 116 |
106 // Grants permission to delete from filesystem |filesystem_id|. 'delete-from' | 117 // Grants permission to delete from filesystem |filesystem_id|. 'delete-from' |
107 // is used to allow deleting files into the destination filesystem without | 118 // is used to allow deleting files into the destination filesystem without |
108 // granting more general create and write permissions. | 119 // granting more general create and write permissions. |
109 virtual void GrantDeleteFromFileSystem(int child_id, | 120 virtual void GrantDeleteFromFileSystem(int child_id, |
(...skipping 16 matching lines...) Expand all Loading... |
126 const std::string& filesystem_id) = 0; | 137 const std::string& filesystem_id) = 0; |
127 | 138 |
128 // Returns true if delete-from access has been granted to |filesystem_id|. | 139 // Returns true if delete-from access has been granted to |filesystem_id|. |
129 virtual bool CanDeleteFromFileSystem(int child_id, | 140 virtual bool CanDeleteFromFileSystem(int child_id, |
130 const std::string& filesystem_id) = 0; | 141 const std::string& filesystem_id) = 0; |
131 }; | 142 }; |
132 | 143 |
133 } // namespace content | 144 } // namespace content |
134 | 145 |
135 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 146 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
OLD | NEW |