commit 1f32537398c0c7b08e394c240810655834c68ef0
author Eghosa Ewansiha-Vlachavas <eevlachavas@google.com> Fri Sep 30 13:08:58 2022 +0000
committer Eghosa Ewansiha-Vlachavas <eevlachavas@google.com> Tue Oct 04 11:13:28 2022 +0000
tree d3342c904c5de41a3981e50562c6114654334a08
parent 883e1b9fcb5a86fbed77d299165473058da080e0

Add new permission to manage exemptions for platfrom restricitons

* This is permission will be included with the DEVICE_MANAGER role

Bug: 246330879
Test: atest CtsPermission2TestCases
Change-Id: Ib0950754f68359756f257b0b3cefdfd6830fe3f5

core/api/system-current.txt

diff --git a/core/api/system-current.txt b/core/api/system-current.txt
index f221eca..e34f37f 100644
--- a/core/api/system-current.txt
+++ b/core/api/system-current.txt
@@ -167,6 +167,7 @@
     field public static final String MANAGE_CONTENT_SUGGESTIONS = "android.permission.MANAGE_CONTENT_SUGGESTIONS";
     field public static final String MANAGE_DEBUGGING = "android.permission.MANAGE_DEBUGGING";
     field public static final String MANAGE_DEVICE_ADMINS = "android.permission.MANAGE_DEVICE_ADMINS";
+    field public static final String MANAGE_DEVICE_POLICY_APP_EXEMPTIONS = "android.permission.MANAGE_DEVICE_POLICY_APP_EXEMPTIONS";
     field public static final String MANAGE_ETHERNET_NETWORKS = "android.permission.MANAGE_ETHERNET_NETWORKS";
     field public static final String MANAGE_FACTORY_RESET_PROTECTION = "android.permission.MANAGE_FACTORY_RESET_PROTECTION";
     field public static final String MANAGE_GAME_ACTIVITY = "android.permission.MANAGE_GAME_ACTIVITY";

core/res/AndroidManifest.xml

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index ded1b89..f0b1b2a 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -3051,6 +3051,10 @@
     <permission android:name="android.permission.QUERY_ADMIN_POLICY"
                 android:protectionLevel="signature|role" />
 
+    <!-- @SystemApi @hide Allows an application to exempt apps from platform restrictions.-->
+    <permission android:name="android.permission.MANAGE_DEVICE_POLICY_APP_EXEMPTIONS"
+                android:protectionLevel="signature|role" />
+
     <!-- @SystemApi @hide Allows an application to set a device owner on retail demo devices.-->
     <permission android:name="android.permission.PROVISION_DEMO_DEVICE"
                 android:protectionLevel="signature|setup" />