commit 42c32c0c88e4049a358b0a2bf6e6a5881ee206b8
author Jeff Sharkey <jsharkey@android.com> Tue Feb 18 14:25:47 2014 -0800
committer Jeff Sharkey <jsharkey@android.com> Tue Mar 18 11:05:43 2014 -0700
tree 20ab6184e6577ffb1f58bbdfc4078528f326aed8
parent 6532523652cf16d3e498939965defab4bd22c491

Lock down MANAGE_DOCUMENTS permission.

MANAGE_DOCUMENTS is a very broad permission, since it allows full
access to all DocumentsProviders.  DocumentsUI should really be the
only app holding this permission; everyone else should rely on Uri
permission grants for access.

Bug: 12958298
Change-Id: I1def48a4ea1814e031fc8513c3cd051d764cd7f8

core/res/AndroidManifest.xml

diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml
index daff390..ca31109 100644
--- a/core/res/AndroidManifest.xml
+++ b/core/res/AndroidManifest.xml
@@ -1192,7 +1192,7 @@
         android:permissionGroup="android.permission-group.STORAGE"
         android:label="@string/permlab_manageDocs"
         android:description="@string/permdesc_manageDocs"
-        android:protectionLevel="signature|system" />
+        android:protectionLevel="signature" />
 
     <!-- ================================== -->
     <!-- Permissions for screenlock         -->