| commit | 58b799a7251c8c7719df8a9ae0906505fd09e444 | [log] [tgz] |
|---|---|---|
| author | Utkarsh Nigam <utkarshnigam@google.com> | Thu Sep 12 19:08:23 2024 +0000 |
| committer | Utkarsh Nigam <utkarshnigam@google.com> | Thu Sep 12 22:41:34 2024 +0000 |
| tree | 305997767bf3fa00c8c218589d907c5009bc7605 | |
| parent | ad216bac194362d56631dc8e20c8236996516b09 [diff] |
Return early when the caller doesn't have any permission. We don't need to query app search db if caller doesn't have any permission. Change-Id: I92eeca29b1b5d44592001434eb252a4b884ea7bc Flag: android.app.appfunctions.flags.enable_app_function_manager Test: Verified by running locally. Will add CTS in next cl. Bug: 360864791
diff --git a/services/appfunctions/java/com/android/server/appfunctions/CallerValidatorImpl.java b/services/appfunctions/java/com/android/server/appfunctions/CallerValidatorImpl.java index c4ccdd8..94a63b4 100644 --- a/services/appfunctions/java/com/android/server/appfunctions/CallerValidatorImpl.java +++ b/services/appfunctions/java/com/android/server/appfunctions/CallerValidatorImpl.java
@@ -112,6 +112,10 @@ mContext.checkPermission(Manifest.permission.EXECUTE_APP_FUNCTIONS, pid, uid) == PackageManager.PERMISSION_GRANTED; + if (!hasExecutionPermission) { + return AndroidFuture.completedFuture(false); + } + final long token = Binder.clearCallingIdentity(); try { FutureAppSearchSession futureAppSearchSession =