Add privilege check 69/71569/2 accepted/tizen/common/20160526.150347 accepted/tizen/ivi/20160526.094943 accepted/tizen/mobile/20160526.095131 accepted/tizen/tv/20160526.095011 accepted/tizen/wearable/20160526.095046 submit/tizen/20160526.062537
authorDaehyeon Jung <darrenh.jung@samsung.com>
Thu, 26 May 2016 03:42:55 +0000 (12:42 +0900)
committerDaehyeon Jung <darrenh.jung@samsung.com>
Thu, 26 May 2016 03:59:24 +0000 (12:59 +0900)
Change-Id: Ib0ffbae1653aecabb329a3457ee00536debe249d
Signed-off-by: Daehyeon Jung <darrenh.jung@samsung.com>
src/widget_service.c

index 77be756b2e0cd94eb4e9ed751f13c8babe57fc4d..126a884762342147fe44dc3c60a2a8a88ce1c990 100644 (file)
@@ -1262,6 +1262,11 @@ EAPI char *widget_service_get_widget_id(const char *appid)
                return NULL;
        }
 
+       if (check_privilege("http://tizen.org/privilege/widget.viewer") < 0) {
+               set_last_result(WIDGET_ERROR_PERMISSION_DENIED);
+               return NULL;
+       }
+
        classid = _get_widget_id(appid, getuid());
        if (classid == NULL && get_last_result() == WIDGET_ERROR_NOT_EXIST)
                classid = _get_widget_id(appid, GLOBALAPP_USER);
@@ -1331,6 +1336,11 @@ EAPI char *widget_service_get_package_id(const char *widget_id)
                return NULL;
        }
 
+       if (check_privilege("http://tizen.org/privilege/widget.viewer") < 0) {
+               set_last_result(WIDGET_ERROR_PERMISSION_DENIED);
+               return NULL;
+       }
+
        pkgid = _get_package_id(widget_id, getuid());
        if (pkgid == NULL && get_last_result() == WIDGET_ERROR_NOT_EXIST)
                pkgid = _get_package_id(widget_id, GLOBALAPP_USER);