From d42530d7d4a2bf3ad87b904573124d44ea318096 Mon Sep 17 00:00:00 2001
From: Hyotaek Shim <hyotaek.shim@samsung.com>
Date: Thu, 10 May 2018 12:03:28 +0900
Subject: [PATCH] Fix dbus/cynara policy rules

Change-Id: I077e8ba1d13fe2b18c153b0e43cf6d9d6fca82a1
Signed-off-by: Hyotaek Shim <hyotaek.shim@samsung.com>
---
 packaging/calendar-service.conf.in | 65 +++++++++++++++++++-------------------
 packaging/calendar-service.spec    |  2 +-
 2 files changed, 34 insertions(+), 33 deletions(-)

diff --git a/packaging/calendar-service.conf.in b/packaging/calendar-service.conf.in
index d49dcd1..a894cd3 100644
--- a/packaging/calendar-service.conf.in
+++ b/packaging/calendar-service.conf.in
@@ -4,18 +4,40 @@
 <busconfig>
     <policy context="default">
 		<deny send_destination="@DBUS_INTERFACE@"/>
-		<allow send_destination="@DBUS_INTERFACE@" send_type="signal"/>
+
+		<allow send_destination="@DBUS_INTERFACE@"
+				send_interface="org.tizen.alarm.client" send_member="alarm_expired"/>
+		<allow send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="register_resource"/>
+		<allow send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="unregister_resource"/>
+
 		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="register_resource"
-				/>
+				send_interface="@DBUS_INTERFACE@" send_member="check_permission_read"
+				privilege="http://tizen.org/privilege/calendar.read"/>
 		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="unregister_resource"
-				/>
+				send_interface="@DBUS_INTERFACE@" send_member="get_record"
+				privilege="http://tizen.org/privilege/calendar.read"/>
 		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="check_permission_write"
-				privilege="http://tizen.org/privilege/calendar.write"/>
+				send_interface="@DBUS_INTERFACE@" send_member="get_all_records"
+				privilege="http://tizen.org/privilege/calendar.read"/>
 		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="check_permission_read"
+				send_interface="@DBUS_INTERFACE@" send_member="get_records_with_query"
+				privilege="http://tizen.org/privilege/calendar.read"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="get_count"
+				privilege="http://tizen.org/privilege/calendar.read"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="get_count_with_query"
+				privilege="http://tizen.org/privilege/calendar.read"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="get_current_version"
+				privilege="http://tizen.org/privilege/calendar.read"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="get_changes_by_version"
+				privilege="http://tizen.org/privilege/calendar.read"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="get_changes_exception_by_version"
 				privilege="http://tizen.org/privilege/calendar.read"/>
 		<check send_destination="@DBUS_INTERFACE@"
 				send_interface="@DBUS_INTERFACE@" send_member="insert_record"
@@ -42,30 +64,6 @@
 				send_interface="@DBUS_INTERFACE@" send_member="replace_records"
 				privilege="http://tizen.org/privilege/calendar.write"/>
 		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_record"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_all_records"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_records_with_query"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_count"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_count_with_query"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_current_version"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_changes_by_version"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
-				send_interface="@DBUS_INTERFACE@" send_member="get_changes_exception_by_version"
-				privilege="http://tizen.org/privilege/calendar.read"/>
-		<check send_destination="@DBUS_INTERFACE@"
 				send_interface="@DBUS_INTERFACE@" send_member="clean_after_sync"
 				privilege="http://tizen.org/privilege/calendar.write"/>
 		<check send_destination="@DBUS_INTERFACE@"
@@ -80,6 +78,9 @@
 		<check send_destination="@DBUS_INTERFACE@"
 				send_interface="@DBUS_INTERFACE@" send_member="unlink_record"
 				privilege="http://tizen.org/privilege/calendar.write"/>
+		<check send_destination="@DBUS_INTERFACE@"
+				send_interface="@DBUS_INTERFACE@" send_member="check_permission_write"
+				privilege="http://tizen.org/privilege/calendar.write"/>
     </policy>
 </busconfig>
 
diff --git a/packaging/calendar-service.spec b/packaging/calendar-service.spec
index 4935db1..a26ece4 100644
--- a/packaging/calendar-service.spec
+++ b/packaging/calendar-service.spec
@@ -1,6 +1,6 @@
 Name:       calendar-service
 Summary:    DB library for calendar
-Version:    0.1.177
+Version:    0.1.178
 Release:    1
 Group:      System/Libraries
 License:    Apache-2.0
-- 
2.7.4