Integrate with Cynara, clients must be privileged 24/61024/14
authorRafal Krypa <r.krypa@samsung.com>
Wed, 13 Apr 2016 14:55:51 +0000 (16:55 +0200)
committerGerrit Code Review <gerrit@review.vlan103.tizen.org>
Wed, 20 Apr 2016 15:30:15 +0000 (08:30 -0700)
commit675972c373489c107e5a5dbf2efa3e545a91dc9c
tree2c73d257b354056c01c00133e3672dfe6ea98b86
parent56cc121590370c87bf27621b1dace36284523ef8
Integrate with Cynara, clients must be privileged

Several API functions now require the caller to hold appropriate privilege.
Ultimately new internal privileges will be created and used by security-manager.
For now, when appropriate privilege is missing, use "notexist" privilege
placeholder.

Privileges required per API:
- security_manager_app_install
  * http://tizen.org/privilege/notexist (private installation)
  * http://tizen.org/privilege/notexist (global installation)

- security_manager_app_uninstall
  * http://tizen.org/privilege/notexist (private uninstallation)
  * http://tizen.org/privilege/notexist (global uninstallation)

- security_manager_private_sharing_apply
  * http://tizen.org/privilege/notexist

- security_manager_private_sharing_drop
  * http://tizen.org/privilege/notexist

- security_manager_policy_update_send
  * http://tizen.org/privilege/notexist (for setting own policy)
  * http://tizen.org/privilege/internal/usermanagement (for setting policy for other or all)

- security_manager_get_configured_policy_for_admin
  * http://tizen.org/privilege/internal/usermanagement

- security_manager_get_configured_policy_for_self
  * http://tizen.org/privilege/notexist

- security_manager_get_policy
  * http://tizen.org/privilege/notexist (for fetching own policy)
  * http://tizen.org/privilege/internal/usermanagement (for fetching policy for other or all)

- security_manager_user_add
  * http://tizen.org/privilege/internal/usermanagement

- security_manager_user_delete
  * http://tizen.org/privilege/internal/usermanagement

Change-Id: Id67473db434b13d977fbd2fa704db3ac1bd1c32b
Signed-off-by: Rafal Krypa <r.krypa@samsung.com>
18 files changed:
src/client/client-security-manager.cpp
src/common/CMakeLists.txt
src/common/config.cpp
src/common/credentials.cpp [new file with mode: 0644]
src/common/include/config.h
src/common/include/credentials.h [new file with mode: 0644]
src/common/include/service_impl.h
src/common/include/smack-labels.h
src/common/service_impl.cpp
src/common/smack-labels.cpp
src/include/app-manager.h
src/include/app-sharing.h
src/include/policy-manager.h
src/include/user-manager.h
src/server/service/base-service.cpp
src/server/service/include/base-service.h
src/server/service/include/service.h
src/server/service/service.cpp