Commit Graph

3 Commits

Author SHA1 Message Date
RuiChen_01 797ad0dc8c feat: use caller identity for skill target permission verification
When launching target ServiceExtension or UIAbility through skill
execution, use the real caller's tokenId for permission verification
instead of aimgr's SA identity. This avoids bypassing all permission
checks and eliminates the need to grant extra permissions to aimgr.

- Add SKILL_EXECUTE_PARAM_CALLER_TOKEN_ID Want parameter key
- Pass callerTokenId via Want from ExecuteInAppSkill(withTokenId)
- CheckStaticCfgPermission: detect skill path, skip SA shortcut,
  verify permissions using caller's tokenId
- Derive callerUid from callerTokenId inside launch functions
  via GetHapTokenInfo, no extra function parameters needed

Change-Id: I0f871ce89953afc3cf69548b75d125cee3ede5d1
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>
Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>
2026-05-21 14:15:03 +08:00
RuiChen_01 d4bd50c012 add support cli exec skill
Co-Authored-By: Agent
Change-Id: Idb644d4dc783549382aae1546a1dde63209b0fb8
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

update: 更新文件 config.json

Signed-off-by: RuiChen_01 <chenrui193@huawei.com>
2026-05-11 07:16:23 +08:00
RuiChen_01 f0aec2c731 support skill execute
Co-Authored-By: Agent
Change-Id: If269cf2bf97f5bc1f671b528d9d648a5b69fedb3
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

new cmd

Change-Id: Id9b3d5f48412705c544602e4124d39e9d06f1cb1
Signed-off-by: zexin_c <chenzexin14@huawei.com>
2026-05-05 20:47:30 +08:00