Extensions: Switch to new permission message system, part I

chrome/common/extensions/permissions/chrome_permission_message_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/permissions/chrome_permission_message_provider.h"
 
 #include "base/memory/scoped_vector.h"
 #include "base/stl_util.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
@@ skipping 118 matching lines @@
   kSuppressList.insert(
       {PermissionMessage::kHostsAll, PermissionMessage::kTabs});
   // Tabs already allows reading favicons.
   kSuppressList.insert({PermissionMessage::kTabs, PermissionMessage::kFavicon});
   // Tabs already allows reading the list of most frequently visited sites.
   kSuppressList.insert(
       {PermissionMessage::kTabs, PermissionMessage::kTopSites});
 
   PermissionMsgSet host_msgs =
       GetHostPermissionMessages(permissions, NULL, extension_type);
-  PermissionMsgSet api_msgs = GetAPIPermissionMessages(permissions, NULL);
+  PermissionMsgSet api_msgs =
+      GetAPIPermissionMessages(permissions, NULL, extension_type);
   PermissionMsgSet manifest_permission_msgs =
       GetManifestPermissionMessages(permissions, NULL);
   messages.insert(messages.end(), host_msgs.begin(), host_msgs.end());
   messages.insert(messages.end(), api_msgs.begin(), api_msgs.end());
   messages.insert(messages.end(), manifest_permission_msgs.begin(),
                   manifest_permission_msgs.end());
 
   for (std::multimap<PermissionMessage::ID,
                      PermissionMessage::ID>::const_iterator it =
            kSuppressList.begin();
@@ skipping 32 matching lines @@
     }
   }
 
   return messages;
 }
 
 std::vector<base::string16> ChromePermissionMessageProvider::GetWarningMessages(
     const PermissionSet* permissions,
     Manifest::Type extension_type) const {
   std::vector<base::string16> message_strings;
-  PermissionMessages messages =
-      GetPermissionMessages(permissions, extension_type);
-
-  // WARNING: When modifying a coalescing rule in this list, be sure to also
-  // modify the corresponding rule in
-  // ChromePermissionMessageProvider::GetCoalescedPermissionMessages().
-  // TODO(sashab): Deprecate this function, and remove this list.
-  for (PermissionMessages::const_iterator i = messages.begin();
-       i != messages.end(); ++i) {
-    int id = i->id();
-    // Access to users' devices should provide a single warning message
-    // specifying the transport method used; serial and/or Bluetooth.
-    if (id == PermissionMessage::kBluetooth ||
-        id == PermissionMessage::kSerial) {
-      if (ContainsMessages(messages,
-                           PermissionMessage::kBluetooth,
-                           PermissionMessage::kSerial)) {
-        if (id == PermissionMessage::kBluetooth) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_BLUETOOTH_SERIAL));
-        }
-        continue;
-      }
-    }
-    if (id == PermissionMessage::kAccessibilityFeaturesModify ||
-        id == PermissionMessage::kAccessibilityFeaturesRead) {
-      if (ContainsMessages(messages,
-                           PermissionMessage::kAccessibilityFeaturesModify,
-                           PermissionMessage::kAccessibilityFeaturesRead)) {
-        if (id == PermissionMessage::kAccessibilityFeaturesModify) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_ACCESSIBILITY_FEATURES_READ_MODIFY));
-        }
-        continue;
-      }
-    }
-    if (id == PermissionMessage::kAudioCapture ||
-        id == PermissionMessage::kVideoCapture) {
-      if (ContainsMessages(messages,
-                           PermissionMessage::kAudioCapture,
-                           PermissionMessage::kVideoCapture)) {
-        if (id == PermissionMessage::kAudioCapture) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_AUDIO_AND_VIDEO_CAPTURE));
-        }
-        continue;
-      }
-    }
-    if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo ||
-        id == PermissionMessage::kMediaGalleriesAllGalleriesDelete ||
-        id == PermissionMessage::kMediaGalleriesAllGalleriesRead) {
-      if (ContainsMessages(
-              messages,
-              PermissionMessage::kMediaGalleriesAllGalleriesCopyTo,
-              PermissionMessage::kMediaGalleriesAllGalleriesDelete,
-              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
-        if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_WRITE_DELETE));
-        }
-        continue;
-      }
-      if (ContainsMessages(
-              messages,
-              PermissionMessage::kMediaGalleriesAllGalleriesCopyTo,
-              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
-        if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_WRITE));
-        }
-        continue;
-      }
-      if (ContainsMessages(
-              messages,
-              PermissionMessage::kMediaGalleriesAllGalleriesDelete,
-              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
-        if (id == PermissionMessage::kMediaGalleriesAllGalleriesDelete) {
-          message_strings.push_back(l10n_util::GetStringUTF16(
-              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_DELETE));
-        }
-        continue;
-      }
-    }
-    if (permissions->HasAPIPermission(APIPermission::kSessions) &&
-        id == PermissionMessage::kTabs) {
-      message_strings.push_back(l10n_util::GetStringUTF16(
-          IDS_EXTENSION_PROMPT_WARNING_HISTORY_READ_AND_SESSIONS));
-      continue;
-    }
-    if (permissions->HasAPIPermission(APIPermission::kSessions) &&
-        id == PermissionMessage::kBrowsingHistory) {
-      message_strings.push_back(l10n_util::GetStringUTF16(
-          IDS_EXTENSION_PROMPT_WARNING_HISTORY_WRITE_AND_SESSIONS));
-      continue;
-    }
-
-    message_strings.push_back(i->message());
-  }
-
+  std::vector<base::string16> message_details_strings;
+  CoalesceWarningMessages(permissions,
+                          extension_type,
+                          &message_strings,
+                          &message_details_strings);
   return message_strings;
 }
 
 std::vector<base::string16>
 ChromePermissionMessageProvider::GetWarningMessagesDetails(
     const PermissionSet* permissions,
     Manifest::Type extension_type) const {
   std::vector<base::string16> message_strings;
-  PermissionMessages messages =
-      GetPermissionMessages(permissions, extension_type);
-
-  for (PermissionMessages::const_iterator i = messages.begin();
-       i != messages.end(); ++i)
-    message_strings.push_back(i->details());
-
-  return message_strings;
+  std::vector<base::string16> message_details_strings;
+  CoalesceWarningMessages(permissions,

[Marc Treib, 2015/03/09 14:08:02]

Before, we'd coalesce the warnings, but not their details. That resulted in
their indices not matching up anymore.

[Yoyo Zhou, 2015/03/11 01:33:23]

Is there a test for this case?

[Marc Treib, 2015/03/11 13:08:52]

Not yet. I'll pull this part out into a separate CL, and add a test.

+                          extension_type,
+                          &message_strings,
+                          &message_details_strings);
+  return message_details_strings;
 }
 
 bool ChromePermissionMessageProvider::IsPrivilegeIncrease(
     const PermissionSet* old_permissions,
     const PermissionSet* new_permissions,
     Manifest::Type extension_type) const {
   // Things can't get worse than native code access.
   if (old_permissions->HasEffectiveFullAccess())
     return false;
 
   // Otherwise, it's a privilege increase if the new one has full access.
   if (new_permissions->HasEffectiveFullAccess())
     return true;
 
   if (IsHostPrivilegeIncrease(old_permissions, new_permissions, extension_type))
     return true;
 
-  if (IsAPIPrivilegeIncrease(old_permissions, new_permissions))
+  if (IsAPIPrivilegeIncrease(old_permissions, new_permissions, extension_type))
     return true;
 
   if (IsManifestPermissionPrivilegeIncrease(old_permissions, new_permissions))
     return true;
 
   return false;
 }
 
 PermissionIDSet ChromePermissionMessageProvider::GetAllPermissionIDs(
     const PermissionSet* permissions,
     Manifest::Type extension_type) const {
   PermissionIDSet permission_ids;
-  GetAPIPermissionMessages(permissions, &permission_ids);
+  GetAPIPermissionMessages(permissions, &permission_ids, extension_type);
   GetManifestPermissionMessages(permissions, &permission_ids);
   GetHostPermissionMessages(permissions, &permission_ids, extension_type);
   return permission_ids;
 }
 
 std::set<PermissionMessage>
 ChromePermissionMessageProvider::GetAPIPermissionMessages(
     const PermissionSet* permissions,
-    PermissionIDSet* permission_ids) const {
+    PermissionIDSet* permission_ids,
+    Manifest::Type extension_type) const {
   PermissionMsgSet messages;
   for (APIPermissionSet::const_iterator permission_it =
            permissions->apis().begin();
        permission_it != permissions->apis().end(); ++permission_it) {
     if (permission_ids != NULL)
       permission_ids->InsertAll(permission_it->GetPermissions());
     if (permission_it->HasMessages()) {
       PermissionMessages new_messages = permission_it->GetMessages();
       messages.insert(new_messages.begin(), new_messages.end());
     }
   }
 
   // A special hack: The warning message for declarativeWebRequest
   // permissions speaks about blocking parts of pages, which is a
   // subset of what the "<all_urls>" access allows. Therefore we
   // display only the "<all_urls>" warning message if both permissions
   // are required.
   if (permissions->ShouldWarnAllHosts()) {
-    if (permission_ids != NULL)
+    // Platform apps don't show hosts warnings. See crbug.com/255229.
+    if (permission_ids != NULL && extension_type != Manifest::TYPE_PLATFORM_APP)

[Marc Treib, 2015/03/09 14:08:02]

Platform apps never show the "all urls" warning in the old system; this makes
the new system do the same.

       permission_ids->insert(APIPermission::kHostsAll);
     messages.erase(
         PermissionMessage(
             PermissionMessage::kDeclarativeWebRequest, base::string16()));
   }
   return messages;
 }
 
 std::set<PermissionMessage>
 ChromePermissionMessageProvider::GetManifestPermissionMessages(
@@ skipping 49 matching lines @@
         permission_message_util::AddHostPermissions(
             permission_ids, hosts, permission_message_util::kReadWrite);
       }
       messages.insert(permission_message_util::CreateFromHostList(
           hosts, permission_message_util::kReadWrite));
     }
   }
   return messages;
 }
 
+void ChromePermissionMessageProvider::CoalesceWarningMessages(
+    const PermissionSet* permissions,
+    Manifest::Type extension_type,
+    std::vector<base::string16>* message_strings,
+    std::vector<base::string16>* message_details_strings) const {
+  PermissionMessages messages =
+      GetPermissionMessages(permissions, extension_type);
+
+  // WARNING: When modifying a coalescing rule in this list, be sure to also
+  // modify the corresponding rule in
+  // ChromePermissionMessageProvider::GetCoalescedPermissionMessages().
+  // TODO(sashab): Deprecate this function, and remove this list.
+  for (PermissionMessages::const_iterator i = messages.begin();
+       i != messages.end(); ++i) {
+    int id = i->id();
+    // Access to users' devices should provide a single warning message
+    // specifying the transport method used; serial and/or Bluetooth.
+    if (id == PermissionMessage::kBluetooth ||
+        id == PermissionMessage::kSerial) {
+      if (ContainsMessages(messages,
+                           PermissionMessage::kBluetooth,
+                           PermissionMessage::kSerial)) {
+        if (id == PermissionMessage::kBluetooth) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_BLUETOOTH_SERIAL));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+    }
+    if (id == PermissionMessage::kAccessibilityFeaturesModify ||
+        id == PermissionMessage::kAccessibilityFeaturesRead) {
+      if (ContainsMessages(messages,
+                           PermissionMessage::kAccessibilityFeaturesModify,
+                           PermissionMessage::kAccessibilityFeaturesRead)) {
+        if (id == PermissionMessage::kAccessibilityFeaturesModify) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_ACCESSIBILITY_FEATURES_READ_MODIFY));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+    }
+    if (id == PermissionMessage::kAudioCapture ||
+        id == PermissionMessage::kVideoCapture) {
+      if (ContainsMessages(messages,
+                           PermissionMessage::kAudioCapture,
+                           PermissionMessage::kVideoCapture)) {
+        if (id == PermissionMessage::kAudioCapture) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_AUDIO_AND_VIDEO_CAPTURE));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+    }
+    if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo ||
+        id == PermissionMessage::kMediaGalleriesAllGalleriesDelete ||
+        id == PermissionMessage::kMediaGalleriesAllGalleriesRead) {
+      if (ContainsMessages(
+              messages,
+              PermissionMessage::kMediaGalleriesAllGalleriesCopyTo,
+              PermissionMessage::kMediaGalleriesAllGalleriesDelete,
+              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
+        if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_WRITE_DELETE));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+      if (ContainsMessages(
+              messages,
+              PermissionMessage::kMediaGalleriesAllGalleriesCopyTo,
+              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
+        if (id == PermissionMessage::kMediaGalleriesAllGalleriesCopyTo) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_WRITE));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+      if (ContainsMessages(
+              messages,
+              PermissionMessage::kMediaGalleriesAllGalleriesDelete,
+              PermissionMessage::kMediaGalleriesAllGalleriesRead)) {
+        if (id == PermissionMessage::kMediaGalleriesAllGalleriesDelete) {
+          message_strings->push_back(l10n_util::GetStringUTF16(
+              IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ_DELETE));
+          message_details_strings->push_back(base::string16());
+        }
+        continue;
+      }
+    }
+    if (permissions->HasAPIPermission(APIPermission::kSessions) &&
+        id == PermissionMessage::kTabs) {
+      message_strings->push_back(l10n_util::GetStringUTF16(
+          IDS_EXTENSION_PROMPT_WARNING_HISTORY_READ_AND_SESSIONS));
+      message_details_strings->push_back(base::string16());
+      continue;
+    }
+    if (permissions->HasAPIPermission(APIPermission::kSessions) &&
+        id == PermissionMessage::kBrowsingHistory) {
+      message_strings->push_back(l10n_util::GetStringUTF16(
+          IDS_EXTENSION_PROMPT_WARNING_HISTORY_WRITE_AND_SESSIONS));
+      message_details_strings->push_back(base::string16());
+      continue;
+    }
+
+    message_strings->push_back(i->message());
+    message_details_strings->push_back(i->details());
+  }
+}
+
 bool ChromePermissionMessageProvider::IsAPIPrivilegeIncrease(
     const PermissionSet* old_permissions,
-    const PermissionSet* new_permissions) const {
+    const PermissionSet* new_permissions,
+    Manifest::Type extension_type) const {
   if (new_permissions == NULL)
     return false;
 
   PermissionMsgSet old_warnings =
-      GetAPIPermissionMessages(old_permissions, NULL);
+      GetAPIPermissionMessages(old_permissions, NULL, extension_type);
   PermissionMsgSet new_warnings =
-      GetAPIPermissionMessages(new_permissions, NULL);
+      GetAPIPermissionMessages(new_permissions, NULL, extension_type);
   PermissionMsgSet delta_warnings =
       base::STLSetDifference<PermissionMsgSet>(new_warnings, old_warnings);
 
   // A special hack: kFileSystemWriteDirectory implies kFileSystemDirectory.
   // TODO(sammc): Remove this. See http://crbug.com/284849.
   if (old_warnings.find(PermissionMessage(
           PermissionMessage::kFileSystemWriteDirectory, base::string16())) !=
       old_warnings.end()) {
     delta_warnings.erase(
         PermissionMessage(PermissionMessage::kFileSystemDirectory,
@@ skipping 50 matching lines @@
   std::set<std::string> old_hosts_set(
       permission_message_util::GetDistinctHosts(old_list, false, false));
   std::set<std::string> new_hosts_only =
       base::STLSetDifference<std::set<std::string> >(new_hosts_set,
                                                      old_hosts_set);
 
   return !new_hosts_only.empty();
 }
 
 }  // namespace extensions