From: Susnata Sovalin <s.sovalin@samsung.com>
Date: Fri, 20 Apr 2018 09:51:00 +0000 (+0530)
Subject: Dbus/Cynara Policy Fix
X-Git-Tag: submit/tizen/20180509.103500^0
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=fd99b07b1a1bd95679945cbc32721e80b95c4286;p=platform%2Fcore%2Flocation%2Fmaps-plugin-here.git

Dbus/Cynara Policy Fix

Change-Id: Ibd9d1e9bc58056f28c3952ae729cb009373e9830
Signed-off-by: Susnata Sovalin <s.sovalin@samsung.com>
---

diff --git a/heremaps-uc-launcher/config/heremaps-uc-launcher.conf b/heremaps-uc-launcher/config/heremaps-uc-launcher.conf
index 608cb59..46fd0c4 100644
--- a/heremaps-uc-launcher/config/heremaps-uc-launcher.conf
+++ b/heremaps-uc-launcher/config/heremaps-uc-launcher.conf
@@ -5,21 +5,25 @@
 	<!-- root can own the service -->
 	<policy user="root">
 		<allow own="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
-
-		<!-- Allow all methods on interfaces -->
 		<allow send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
-		<allow receive_sender="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
 	</policy>
 
 	<policy user="system">
 		<allow own="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
 		<allow send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
-		<allow receive_sender="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
 	</policy>
 
-	<policy context="default">
+	<policy group="users">
 		<allow own="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
-		<allow send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
-		<allow receive_sender="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
+		<allow send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"
+			send_path="/org/tizen/lbs/Providers/HereMapsUCLauncher"/>
+	</policy>
+
+	<policy context="default">
+		<deny own="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
+		<deny send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"/>
+		<check send_destination="org.tizen.lbs.Providers.HereMapsUCLauncher"
+			send_interface="org.tizen.lbs.HereMapsUCLauncher"
+			privilege="http://tizen.org/privilege/mapservice"/>
 	</policy>
 </busconfig>