openharmony/ability_ability_runtime
1
0
Fork 0
mirror of https://github.com/openharmony/ability_ability_runtime.git synced 2026-08-24 22:21:36 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
bed5560260d733698da170a4b40f6a0f44092252
ability_ability_runtime/test/fuzztest/extensionpermissionsutil_fuzzer
T
History
RuiChen_01 797ad0dc8c feat: use caller identity for skill target permission verification 
When launching target ServiceExtension or UIAbility through skill
execution, use the real caller's tokenId for permission verification
instead of aimgr's SA identity. This avoids bypassing all permission
checks and eliminates the need to grant extra permissions to aimgr.

- Add SKILL_EXECUTE_PARAM_CALLER_TOKEN_ID Want parameter key
- Pass callerTokenId via Want from ExecuteInAppSkill(withTokenId)
- CheckStaticCfgPermission: detect skill path, skip SA shortcut,
  verify permissions using caller's tokenId
- Derive callerUid from callerTokenId inside launch functions
  via GetHapTokenInfo, no extra function parameters needed

Change-Id: I0f871ce89953afc3cf69548b75d125cee3ede5d1
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>
Co-Authored-By: Agent
Signed-off-by: RuiChen_01 <chenrui193@huawei.com>
2026-05-21 14:15:03 +08:00
..
corpus
description:add fuzz test case-01
2024-10-12 21:18:04 +08:00
mock
feat: use caller identity for skill target permission verification
2026-05-21 14:15:03 +08:00
BUILD.gn
Revert "description:独立ams_configuration_parameter"
2025-03-27 12:00:10 +08:00
extension_permissions_util_fuzzer.cpp
huangshiwei4@huawei.com
2024-12-12 09:16:38 +08:00
extension_permissions_util_fuzzer.h
description:add fuzz test case-01
2024-10-12 21:18:04 +08:00
project.xml
description:add fuzz test case-01
2024-10-12 21:18:04 +08:00