From: Dariusz Michaluk <d.michaluk@samsung.com>
Date: Mon, 15 May 2017 12:50:18 +0000 (+0200)
Subject: Prevent from collision with system privileges
X-Git-Tag: submit/tizen/20170519.102945~3^2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fheads%2Fappdefined;p=platform%2Fcore%2Fsecurity%2Fsecurity-manager.git

Prevent from collision with system privileges

Change-Id: If307f2b4609d5af45126cdd1aac2e577d8ad5cac
---

diff --git a/src/common/service_impl.cpp b/src/common/service_impl.cpp
index 36491f36..46a74049 100644
--- a/src/common/service_impl.cpp
+++ b/src/common/service_impl.cpp
@@ -96,11 +96,11 @@ private:
 };
 
 bool verifyAppDefinedPrivileges(const AppDefinedPrivilegesVector &privileges) {
-    // TODO check for collision with system privileges
-
     // check if licenses are set for license-privileges
+    // check for collision with system privileges
     for (auto &e : privileges) {
-        if ((std::get<1>(e) == SM_APP_DEFINED_PRIVILEGE_TYPE_LICENSED) && std::get<2>(e).empty())
+        if (((std::get<1>(e) == SM_APP_DEFINED_PRIVILEGE_TYPE_LICENSED) && std::get<2>(e).empty()) ||
+            (std::get<0>(e).find("http://tizen.org/privilege/") != std::string::npos))
             return false;
     }
     return true;