chrome_api_permissions.cc revision ba5b9a6411cb1792fd21f0a078d7a25cd1ceec16 
1// Copyright (c) 2013 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#include "chrome/common/extensions/permissions/chrome_api_permissions.h"
6
7#include "chrome/common/extensions/permissions/api_permission.h"
8#include "chrome/common/extensions/permissions/api_permission_set.h"
9#include "chrome/common/extensions/permissions/bluetooth_permission.h"
10#include "chrome/common/extensions/permissions/media_galleries_permission.h"
11#include "chrome/common/extensions/permissions/permission_message.h"
12#include "chrome/common/extensions/permissions/permissions_info.h"
13#include "chrome/common/extensions/permissions/socket_permission.h"
14#include "chrome/common/extensions/permissions/usb_device_permission.h"
15#include "grit/generated_resources.h"
16
17namespace extensions {
18
19namespace {
20
21const char kOldUnlimitedStoragePermission[] = "unlimited_storage";
22const char kWindowsPermission[] = "windows";
23
24template<typename T> APIPermission* CreateAPIPermission(
25    const APIPermissionInfo* permission) {
26  return new T(permission);
27}
28
29}  // namespace
30
31std::vector<APIPermissionInfo*> ChromeAPIPermissions::GetAllPermissions()
32    const {
33  struct PermissionRegistration {
34    APIPermission::ID id;
35    const char* name;
36    int flags;
37    int l10n_message_id;
38    PermissionMessage::ID message_id;
39    APIPermissionInfo::APIPermissionConstructor constructor;
40  } PermissionsToRegister[] = {
41    // Register permissions for all extension types.
42    { APIPermission::kBackground, "background" },
43    { APIPermission::kClipboardRead, "clipboardRead",
44      APIPermissionInfo::kFlagNone,
45      IDS_EXTENSION_PROMPT_WARNING_CLIPBOARD,
46      PermissionMessage::kClipboard },
47    { APIPermission::kClipboardWrite, "clipboardWrite" },
48    { APIPermission::kDeclarativeContent, "declarativeContent" },
49    { APIPermission::kDeclarativeWebRequest, "declarativeWebRequest" },
50    { APIPermission::kDownloads, "downloads", APIPermissionInfo::kFlagNone,
51      IDS_EXTENSION_PROMPT_WARNING_DOWNLOADS,
52      PermissionMessage::kDownloads },
53    { APIPermission::kDownloadsOpen, "downloads.open",
54      APIPermissionInfo::kFlagNone,
55      IDS_EXTENSION_PROMPT_WARNING_DOWNLOADS_OPEN,
56      PermissionMessage::kDownloadsOpen },
57    { APIPermission::kDownloadsShelf, "downloads.shelf" },
58    { APIPermission::kIdentity, "identity" },
59    { APIPermission::kExperimental, "experimental",
60      APIPermissionInfo::kFlagCannotBeOptional },
61      // NOTE(kalman): this is provided by a manifest property but needs to
62      // appear in the install permission dialogue, so we need a fake
63      // permission for it. See http://crbug.com/247857.
64    { APIPermission::kWebConnectable, "webConnectable",
65      APIPermissionInfo::kFlagCannotBeOptional |
66      APIPermissionInfo::kFlagInternal,
67      IDS_EXTENSION_PROMPT_WARNING_WEB_CONNECTABLE,
68      PermissionMessage::kWebConnectable},
69    { APIPermission::kGeolocation, "geolocation",
70      APIPermissionInfo::kFlagCannotBeOptional,
71      IDS_EXTENSION_PROMPT_WARNING_GEOLOCATION,
72      PermissionMessage::kGeolocation },
73    { APIPermission::kNotification, "notifications" },
74    { APIPermission::kScreensaver, "screensaver" },
75    { APIPermission::kUnlimitedStorage, "unlimitedStorage",
76      APIPermissionInfo::kFlagCannotBeOptional },
77
78    // Register extension permissions.
79    { APIPermission::kActiveTab, "activeTab" },
80    { APIPermission::kAdView, "adview" },
81    { APIPermission::kAlarms, "alarms" },
82    { APIPermission::kBookmark, "bookmarks", APIPermissionInfo::kFlagNone,
83      IDS_EXTENSION_PROMPT_WARNING_BOOKMARKS,
84      PermissionMessage::kBookmarks },
85    { APIPermission::kBrowsingData, "browsingData" },
86    { APIPermission::kContentSettings, "contentSettings",
87      APIPermissionInfo::kFlagNone,
88      IDS_EXTENSION_PROMPT_WARNING_CONTENT_SETTINGS,
89      PermissionMessage::kContentSettings },
90    { APIPermission::kContextMenus, "contextMenus" },
91    { APIPermission::kCookie, "cookies" },
92    { APIPermission::kFileBrowserHandler, "fileBrowserHandler",
93      APIPermissionInfo::kFlagCannotBeOptional },
94    { APIPermission::kFontSettings, "fontSettings",
95      APIPermissionInfo::kFlagCannotBeOptional },
96    { APIPermission::kHistory, "history", APIPermissionInfo::kFlagNone,
97      IDS_EXTENSION_PROMPT_WARNING_BROWSING_HISTORY,
98      PermissionMessage::kBrowsingHistory },
99    { APIPermission::kIdle, "idle" },
100    { APIPermission::kInfobars, "infobars" },
101    { APIPermission::kInput, "input", APIPermissionInfo::kFlagNone,
102      IDS_EXTENSION_PROMPT_WARNING_INPUT,
103      PermissionMessage::kInput },
104    { APIPermission::kLocation, "location",
105      APIPermissionInfo::kFlagCannotBeOptional,
106      IDS_EXTENSION_PROMPT_WARNING_GEOLOCATION,
107      PermissionMessage::kGeolocation },
108    { APIPermission::kManagement, "management", APIPermissionInfo::kFlagNone,
109      IDS_EXTENSION_PROMPT_WARNING_MANAGEMENT,
110      PermissionMessage::kManagement },
111    { APIPermission::kNativeMessaging, "nativeMessaging",
112      APIPermissionInfo::kFlagNone,
113      IDS_EXTENSION_PROMPT_WARNING_NATIVE_MESSAGING,
114      PermissionMessage::kNativeMessaging },
115    { APIPermission::kPower, "power", },
116    { APIPermission::kPrivacy, "privacy", APIPermissionInfo::kFlagNone,
117      IDS_EXTENSION_PROMPT_WARNING_PRIVACY,
118      PermissionMessage::kPrivacy },
119    { APIPermission::kSessionRestore, "sessionRestore" },
120    { APIPermission::kStorage, "storage" },
121    { APIPermission::kSyncFileSystem, "syncFileSystem",
122      APIPermissionInfo::kFlagNone,
123      IDS_EXTENSION_PROMPT_WARNING_SYNCFILESYSTEM,
124      PermissionMessage::kSyncFileSystem },
125    { APIPermission::kTab, "tabs", APIPermissionInfo::kFlagNone,
126      IDS_EXTENSION_PROMPT_WARNING_TABS,
127      PermissionMessage::kTabs },
128    { APIPermission::kTopSites, "topSites", APIPermissionInfo::kFlagNone,
129      IDS_EXTENSION_PROMPT_WARNING_BROWSING_HISTORY,
130      PermissionMessage::kBrowsingHistory },
131    { APIPermission::kTts, "tts", 0, APIPermissionInfo::kFlagCannotBeOptional },
132    { APIPermission::kTtsEngine, "ttsEngine",
133      APIPermissionInfo::kFlagCannotBeOptional,
134      IDS_EXTENSION_PROMPT_WARNING_TTS_ENGINE,
135      PermissionMessage::kTtsEngine },
136    { APIPermission::kWebNavigation, "webNavigation",
137      APIPermissionInfo::kFlagNone,
138      IDS_EXTENSION_PROMPT_WARNING_TABS, PermissionMessage::kTabs },
139    { APIPermission::kWebRequest, "webRequest" },
140    { APIPermission::kWebRequestBlocking, "webRequestBlocking" },
141    { APIPermission::kWebView, "webview",
142      APIPermissionInfo::kFlagCannotBeOptional },
143
144    // Register private permissions.
145    { APIPermission::kActivityLogPrivate, "activityLogPrivate",
146      APIPermissionInfo::kFlagCannotBeOptional,
147      IDS_EXTENSION_PROMPT_WARNING_ACTIVITY_LOG_PRIVATE,
148      PermissionMessage::kActivityLogPrivate },
149    { APIPermission::kAutoTestPrivate, "autotestPrivate",
150      APIPermissionInfo::kFlagCannotBeOptional },
151    { APIPermission::kBookmarkManagerPrivate, "bookmarkManagerPrivate",
152      APIPermissionInfo::kFlagCannotBeOptional },
153    { APIPermission::kChromeosInfoPrivate, "chromeosInfoPrivate",
154      APIPermissionInfo::kFlagCannotBeOptional },
155    { APIPermission::kCommandLinePrivate, "commandLinePrivate",
156      APIPermissionInfo::kFlagCannotBeOptional },
157    { APIPermission::kDeveloperPrivate, "developerPrivate",
158      APIPermissionInfo::kFlagCannotBeOptional },
159    { APIPermission::kDiagnostics, "diagnostics",
160      APIPermissionInfo::kFlagCannotBeOptional },
161    { APIPermission::kDial, "dial", APIPermissionInfo::kFlagCannotBeOptional },
162    { APIPermission::kDownloadsInternal, "downloadsInternal" },
163    { APIPermission::kFileBrowserHandlerInternal, "fileBrowserHandlerInternal",
164      APIPermissionInfo::kFlagCannotBeOptional },
165    { APIPermission::kFileBrowserPrivate, "fileBrowserPrivate",
166      APIPermissionInfo::kFlagCannotBeOptional },
167    { APIPermission::kIdentityPrivate, "identityPrivate",
168      APIPermissionInfo::kFlagCannotBeOptional },
169    { APIPermission::kLogPrivate, "logPrivate"},
170    { APIPermission::kNetworkingPrivate, "networkingPrivate",
171      APIPermissionInfo::kFlagCannotBeOptional,
172      IDS_EXTENSION_PROMPT_WARNING_NETWORKING_PRIVATE,
173      PermissionMessage::kNetworkingPrivate },
174    { APIPermission::kMediaPlayerPrivate, "mediaPlayerPrivate",
175      APIPermissionInfo::kFlagCannotBeOptional },
176    { APIPermission::kMetricsPrivate, "metricsPrivate",
177      APIPermissionInfo::kFlagCannotBeOptional },
178    { APIPermission::kMusicManagerPrivate, "musicManagerPrivate",
179      APIPermissionInfo::kFlagCannotBeOptional,
180      IDS_EXTENSION_PROMPT_WARNING_MUSIC_MANAGER_PRIVATE,
181      PermissionMessage::kMusicManagerPrivate },
182    { APIPermission::kPreferencesPrivate, "preferencesPrivate",
183      APIPermissionInfo::kFlagCannotBeOptional },
184    { APIPermission::kSystemPrivate, "systemPrivate",
185      APIPermissionInfo::kFlagCannotBeOptional },
186    { APIPermission::kCloudPrintPrivate, "cloudPrintPrivate",
187      APIPermissionInfo::kFlagCannotBeOptional },
188    { APIPermission::kInputMethodPrivate, "inputMethodPrivate",
189      APIPermissionInfo::kFlagCannotBeOptional },
190    { APIPermission::kEchoPrivate, "echoPrivate",
191      APIPermissionInfo::kFlagCannotBeOptional },
192    { APIPermission::kFeedbackPrivate, "feedbackPrivate",
193      APIPermissionInfo::kFlagCannotBeOptional },
194    { APIPermission::kRecoveryPrivate, "recoveryPrivate",
195      APIPermissionInfo::kFlagCannotBeOptional },
196    { APIPermission::kRtcPrivate, "rtcPrivate",
197      APIPermissionInfo::kFlagCannotBeOptional },
198    { APIPermission::kTerminalPrivate, "terminalPrivate",
199      APIPermissionInfo::kFlagCannotBeOptional },
200    { APIPermission::kWallpaperPrivate, "wallpaperPrivate",
201      APIPermissionInfo::kFlagCannotBeOptional },
202    { APIPermission::kWebRequestInternal, "webRequestInternal" },
203    { APIPermission::kWebstorePrivate, "webstorePrivate",
204      APIPermissionInfo::kFlagCannotBeOptional },
205    { APIPermission::kMediaGalleriesPrivate, "mediaGalleriesPrivate",
206      APIPermissionInfo::kFlagCannotBeOptional },
207    { APIPermission::kStreamsPrivate, "streamsPrivate",
208      APIPermissionInfo::kFlagCannotBeOptional },
209    { APIPermission::kEnterprisePlatformKeysPrivate,
210      "enterprise.platformKeysPrivate",
211      APIPermissionInfo::kFlagCannotBeOptional },
212
213    // Full url access permissions.
214    { APIPermission::kDebugger, "debugger",
215      APIPermissionInfo::kFlagImpliesFullURLAccess |
216          APIPermissionInfo::kFlagCannotBeOptional,
217      IDS_EXTENSION_PROMPT_WARNING_DEBUGGER,
218      PermissionMessage::kDebugger },
219    { APIPermission::kDevtools, "devtools",
220      APIPermissionInfo::kFlagImpliesFullURLAccess |
221      APIPermissionInfo::kFlagCannotBeOptional |
222      APIPermissionInfo::kFlagInternal },
223    { APIPermission::kPageCapture, "pageCapture",
224      APIPermissionInfo::kFlagImpliesFullURLAccess },
225    { APIPermission::kTabCapture, "tabCapture",
226      APIPermissionInfo::kFlagImpliesFullURLAccess },
227    { APIPermission::kPlugin, "plugin",
228      APIPermissionInfo::kFlagImpliesFullURLAccess |
229      APIPermissionInfo::kFlagImpliesFullAccess |
230      APIPermissionInfo::kFlagCannotBeOptional |
231      APIPermissionInfo::kFlagInternal,
232      IDS_EXTENSION_PROMPT_WARNING_FULL_ACCESS,
233      PermissionMessage::kFullAccess },
234    { APIPermission::kProxy, "proxy",
235      APIPermissionInfo::kFlagImpliesFullURLAccess |
236          APIPermissionInfo::kFlagCannotBeOptional },
237
238    // Platform-app permissions.
239    { APIPermission::kSerial, "serial", APIPermissionInfo::kFlagNone,
240      IDS_EXTENSION_PROMPT_WARNING_SERIAL,
241      PermissionMessage::kSerial },
242    // Because warning messages for the "socket" permission vary based on the
243    // permissions parameters, no message ID or message text is specified here.
244    // The message ID and text used will be determined at run-time in the
245    // |SocketPermission| class.
246    { APIPermission::kSocket, "socket",
247      APIPermissionInfo::kFlagCannotBeOptional, 0,
248      PermissionMessage::kNone, &CreateAPIPermission<SocketPermission> },
249    { APIPermission::kAppCurrentWindowInternal, "app.currentWindowInternal" },
250    { APIPermission::kAppRuntime, "app.runtime" },
251    { APIPermission::kAppWindow, "app.window" },
252    { APIPermission::kAudioCapture, "audioCapture",
253      APIPermissionInfo::kFlagNone,
254      IDS_EXTENSION_PROMPT_WARNING_AUDIO_CAPTURE,
255      PermissionMessage::kAudioCapture },
256    { APIPermission::kVideoCapture, "videoCapture",
257      APIPermissionInfo::kFlagNone,
258      IDS_EXTENSION_PROMPT_WARNING_VIDEO_CAPTURE,
259      PermissionMessage::kVideoCapture },
260    // The permission string for "fileSystem" is only shown when "write" is
261    // present. Read-only access is only granted after the user has been shown
262    // a file chooser dialog and selected a file. Selecting the file is
263    // considered consent to read it.
264    { APIPermission::kFileSystem, "fileSystem" },
265    { APIPermission::kFileSystemRetainEntries, "fileSystem.retainEntries" },
266    { APIPermission::kFileSystemWrite, "fileSystem.write",
267      APIPermissionInfo::kFlagNone,
268      IDS_EXTENSION_PROMPT_WARNING_FILE_SYSTEM_WRITE,
269      PermissionMessage::kFileSystemWrite },
270    // Because warning messages for the "mediaGalleries" permission vary based
271    // on the permissions parameters, no message ID or message text is
272    // specified here.
273    // The message ID and text used will be determined at run-time in the
274    // |MediaGalleriesPermission| class.
275    { APIPermission::kMediaGalleries, "mediaGalleries",
276      APIPermissionInfo::kFlagNone, 0,
277      PermissionMessage::kNone,
278      &CreateAPIPermission<MediaGalleriesPermission> },
279    { APIPermission::kPushMessaging, "pushMessaging",
280      APIPermissionInfo::kFlagCannotBeOptional },
281    // Because warning messages for the "bluetooth" permission vary based on
282    // the permissions parameters, no message ID or message text is specified
283    // here. The message ID and text used will be determined at run-time in the
284    // |BluetoothPermission| class.
285    { APIPermission::kBluetooth, "bluetooth", APIPermissionInfo::kFlagNone,
286      0, PermissionMessage::kNone,
287      &CreateAPIPermission<BluetoothPermission> },
288    { APIPermission::kUsb, "usb", APIPermissionInfo::kFlagNone,
289      IDS_EXTENSION_PROMPT_WARNING_USB,
290      PermissionMessage::kUsb },
291    { APIPermission::kUsbDevice, "usbDevices",
292      APIPermissionInfo::kFlagNone, 0, PermissionMessage::kNone,
293      &CreateAPIPermission<UsbDevicePermission> },
294    { APIPermission::kSystemIndicator, "systemIndicator",
295      APIPermissionInfo::kFlagNone,
296      IDS_EXTENSION_PROMPT_WARNING_SYSTEM_INDICATOR,
297      PermissionMessage::kSystemIndicator },
298    { APIPermission::kSystemCpu, "system.cpu" },
299    { APIPermission::kSystemMemory, "system.memory" },
300    { APIPermission::kSystemDisplay, "system.display" },
301    { APIPermission::kSystemStorage, "system.storage" },
302    { APIPermission::kPointerLock, "pointerLock" },
303    { APIPermission::kFullscreen, "fullscreen" },
304    { APIPermission::kAudio, "audio" },
305  };
306
307  std::vector<APIPermissionInfo*> permissions;
308
309  for (size_t i = 0; i < ARRAYSIZE_UNSAFE(PermissionsToRegister); ++i) {
310    const PermissionRegistration& pr = PermissionsToRegister[i];
311    permissions.push_back(new APIPermissionInfo(
312        pr.id, pr.name, pr.l10n_message_id,
313        pr.message_id ? pr.message_id : PermissionMessage::kNone,
314        pr.flags,
315        pr.constructor));
316  }
317  return permissions;
318}
319
320std::vector<PermissionsProvider::AliasInfo>
321ChromeAPIPermissions::GetAllAliases() const {
322  // Register aliases.
323  std::vector<PermissionsProvider::AliasInfo> aliases;
324  aliases.push_back(PermissionsProvider::AliasInfo(
325      "unlimitedStorage", kOldUnlimitedStoragePermission));
326  aliases.push_back(PermissionsProvider::AliasInfo(
327      "tabs", kWindowsPermission));
328  return aliases;
329}
330
331}  // namespace extensions
332