From: Radoslaw Bartosiak <r.bartosiak@samsung.com>
Date: Fri, 27 Jan 2017 09:15:27 +0000 (+0100)
Subject: Add APPDEFINED Cynara bucket
X-Git-Tag: submit/tizen/20170519.102945~3^2~23
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=78610f64774db652023d8b49312f61b62efb54c7;p=platform%2Fcore%2Fsecurity%2Fsecurity-manager.git

Add APPDEFINED Cynara bucket

In order to support app-defined privileges and licence-manager
new bucket for storing these privileges is introduced.

Change-Id: I5e8cf96869489cd4f255efba31e37337e7925c74
Signed-off-by: Radoslaw Bartosiak <r.bartosiak@samsung.com>
---

diff --git a/policy/security-manager-policy-reload.in b/policy/security-manager-policy-reload.in
index 4a9dd538..2490ca32 100755
--- a/policy/security-manager-policy-reload.in
+++ b/policy/security-manager-policy-reload.in
@@ -15,6 +15,7 @@ do
 done <<END
 PRIVACY_MANAGER DENY
 ADMIN NONE
+APPDEFINED NONE
 MAIN DENY
 MANIFESTS DENY
 END
@@ -29,6 +30,7 @@ do
 done <<END
 MAIN MANIFESTS
 PRIVACY_MANAGER MAIN
+ADMIN APPDEFINED
 END
 
 # Import user-type policies
diff --git a/src/common/cynara.cpp b/src/common/cynara.cpp
index fd18f212..dc42bdf5 100644
--- a/src/common/cynara.cpp
+++ b/src/common/cynara.cpp
@@ -66,6 +66,9 @@ namespace SecurityManager {
  *   user type. ALLOW rules only.
  * - ADMIN           - stores custom rules introduced by device administrator.
  *   Ignored if no matching rule found.
+ * - APPDEFINED      - stores privileges introduced by the providers application.
+ *   Ignored if no matching rule found.
+
  *
  * Below is basic layout of buckets:
  *
@@ -109,7 +112,15 @@ namespace SecurityManager {
  *        |                |       ADMIN      |                 |
  *        |--------------->|                  |<----------------|
  *                         |------------------|
- *
+ *                                  |
+ *                                  |
+ *                                  |
+ *                                  V
+ *                         |------------------|
+ *                         |     <<none>>     |
+ *                         |                  |
+ *                         |    APPDEFINED    !
+ *                         |------------------|
  */
 CynaraAdmin::BucketsMap CynaraAdmin::Buckets =
 {
@@ -122,6 +133,7 @@ CynaraAdmin::BucketsMap CynaraAdmin::Buckets =
     { Bucket::USER_TYPE_SYSTEM, std::string("USER_TYPE_SYSTEM")},
     { Bucket::ADMIN, std::string("ADMIN")},
     { Bucket::MANIFESTS, std::string("MANIFESTS")},
+    { Bucket::APPDEFINED, std::string("APPDEFINED")},
 };
 
 CynaraAdminPolicy::CynaraAdminPolicy()
diff --git a/src/common/include/cynara.h b/src/common/include/cynara.h
index 5be7344e..508a1f19 100644
--- a/src/common/include/cynara.h
+++ b/src/common/include/cynara.h
@@ -50,7 +50,8 @@ enum class Bucket
     USER_TYPE_GUEST,
     USER_TYPE_SYSTEM,
     ADMIN,
-    MANIFESTS
+    MANIFESTS,
+    APPDEFINED
 };
 
 class CynaraException