RuiChen_01 9e718f59d3 fix(skill): enforce SA caller and skill permission checks ...

CheckSkillPermission previously only verified system-app status when
callerTokenId was 0, leaving the CliToolMgr-proxied path (non-zero
callerTokenId) without any verification. Add two layers of checks:

- Direct IPC caller must be a system ability (IsSACall)
- Indirect caller must hold every permission declared by the skill
  (AccessTokenKit::VerifyAccessToken)

Also drop the callerTokenId=0 default and thread callerTokenId through
the ExecuteInAppSkill path so the direct-call variant is also covered.

Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>

🤖‍ AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%]
Co-authored-by: claude (glm-5.2) <ai@local>

2026-06-18 16:33:36 +08:00

..

skill_execute_manager.h

fix(skill): enforce SA caller and skill permission checks

2026-06-18 16:33:36 +08:00

skill_execute_record.h

feat: add skill execute timeout mechanism and fix ServiceExtension context

2026-05-07 15:45:11 +08:00