chrome.identity API: Restrict gaia ID access

chrome.identity API: Restrict gaia ID access

This restricts the availability of obfuscated GAIA ID
info (from chrome.identity.getProfileUserInfo) to apps
which specify the identity.email manifest permission.

BUG=415641
Committed: https://crrev.com/d6084a9790eafe0ca4e980c0a3d10d05566bb383
Cr-Commit-Position: refs/heads/master@{#311570}

[Ken Rockot(use gerrit already), 2015-01-11 02:32:21]

rockot@chromium.org changed reviewers:
+ asargent@chromium.org, vabr@chromium.org

[Ken Rockot(use gerrit already), 2015-01-11 02:33:52]

asargent: Could you please take a look for general extensions ownership?

vabr: Could you please take a look at the new permission string? Is this
sufficient and accurate?

Thanks!

[vabr (Chromium), 2015-01-12 08:55:34]

Thanks for looping me in for the string, Ken.

Currently we have concerns that the users won't understand the difference
between "Google account identity" and "e-mail address". In a couple of hours, we
have a team meeting, where I'll bring up this issue, and after that I'll either
approve your current CL, or suggest an alternative.

Cheers,
Vaclav

[vabr (Chromium), 2015-01-12 13:29:16]

The promised update is in http://crbug.com/415641#c23. That is:
* Please do put the access to the obfuscated GAIA ID behind a permission with a
user-facing permission string,
* but please reuse identity.email for that purpose. No need to create the new
identity.gaiaId.

Thanks for your help on this. Please do let me know if there are any more
questions.

Cheers,
Vaclav

[Ken Rockot(use gerrit already), 2015-01-14 20:33:45]

Ok, CL and description updated according to the conclusions outlined by vabr@.
Ready for your review, Antony

[asargent_no_longer_on_chrome, 2015-01-14 20:39:56]

lgtm

[Ken Rockot(use gerrit already), 2015-01-14 21:07:02]

The CQ bit was checked by rockot@chromium.org

[commit-bot: I haz the power, 2015-01-14 21:08:15]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/784283006/20001

[commit-bot: I haz the power, 2015-01-14 23:26:47]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2015-01-14 23:27:32]

Patchset 2 (id:??) landed as
https://crrev.com/d6084a9790eafe0ca4e980c0a3d10d05566bb383
Cr-Commit-Position: refs/heads/master@{#311570}