Dbus/Cynara Policy Fix

Change-Id: I72284113d9feb13f7b0dce2adb5c6edd0ad24a5d
Signed-off-by: Susnata Sovalin <s.sovalin@samsung.com>

diff --git a/lbs-server/config/lbs-server.conf b/lbs-server/config/lbs-server.conf
index 463d13dd7e7b243664faf6d8097b6a39d1b6ccd5..723de625c184bc664dbb7aed77e526f1f4f9233c 100644 (file)
--- a/lbs-server/config/lbs-server.conf
+++ b/lbs-server/config/lbs-server.conf
@@ -5,45 +5,31 @@
        <!-- root can own the service -->
        <policy user="root">
                <allow own="org.tizen.lbs.Providers.LbsServer"/>
-               <!-- Allow all methods on interfaces -->
                <allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-               <allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
        </policy>
 
        <policy user="system">
                <allow own="org.tizen.lbs.Providers.LbsServer"/>
                <allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
-               <allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
        </policy>
 
-       <policy context="default">
+       <policy group="location">
                <allow own="org.tizen.lbs.Providers.LbsServer"/>
+               <allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+       </policy>
+
+       <policy group="users">
+               <allow own="org.tizen.lbs.Providers.LbsServer"/>
+               <allow send_destination="org.tizen.lbs.Providers.LbsServer"/>
+       </policy>
+
+       <policy context="default">
+               <deny own="org.tizen.lbs.Providers.LbsServer"/>
                <deny send_destination="org.tizen.lbs.Providers.LbsServer"/>
-               <allow send_type="signal" send_destination="org.tizen.lbs.Providers.LbsServer"/>
-               <allow receive_sender="org.tizen.lbs.Providers.LbsServer"/>
 
                <check send_destination="org.tizen.lbs.Providers.LbsServer"
-                               send_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-               <check send_destination="org.tizen.lbs.Providers.LbsServer"
-                               send_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-               <check send_destination="org.tizen.lbs.Providers.LbsServer"
-                               send_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-               <check send_destination="org.tizen.lbs.Providers.LbsServer"
-                               send_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-               <check send_destination="org.tizen.lbs.Providers.LbsServer"
-                               send_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
-
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Manager" privilege="http://tizen.org/privilege/location" />
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Position" privilege="http://tizen.org/privilege/location" />
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Nmea" privilege="http://tizen.org/privilege/location" />
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Satellite" privilege="http://tizen.org/privilege/location" />
-               <check receive_sender="org.tizen.lbs.Providers.LbsServer"
-                               receive_interface="org.tizen.lbs.Batch" privilege="http://tizen.org/privilege/location" />
+                       privilege="http://tizen.org/privilege/location"/>
+               <check receive_sender="org.tizen.lbs.Providers.LbsServer" receive_type="signal"
+                       privilege="http://tizen.org/privilege/location"/>
        </policy>
 </busconfig>