1 /*
2  * Copyright (c) 2023-2024 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "utils/extension_permissions_util.h"
17 
18 #include "hilog_tag_wrapper.h"
19 #include "hilog_wrapper.h"
20 #include "permission_verification.h"
21 
22 namespace OHOS {
23 namespace AAFwk {
24 
CheckSAPermission(const AppExecFwk::ExtensionAbilityType & extensionType)25 bool ExtensionPermissionsUtil::CheckSAPermission(const AppExecFwk::ExtensionAbilityType &extensionType)
26 {
27     auto checkRet = false;
28     if (!PermissionVerification::GetInstance()->IsSACall()) {
29         return true;
30     }
31     TAG_LOGD(AAFwkTag::ABILITYMGR, "CheckSAPermission, extensionType: %{public}d.", extensionType);
32     if (extensionType == AppExecFwk::ExtensionAbilityType::FORM) {
33         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
34             "ohos.permission.CONNECT_FORM_EXTENSION");
35     } else if (extensionType == AppExecFwk::ExtensionAbilityType::WORK_SCHEDULER) {
36         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
37             "ohos.permission.CONNECT_WORK_SCHEDULER_EXTENSION");
38     } else if (extensionType == AppExecFwk::ExtensionAbilityType::INPUTMETHOD) {
39         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
40             "ohos.permission.CONNECT_INPUT_METHOD_EXTENSION");
41     } else if (extensionType == AppExecFwk::ExtensionAbilityType::ACCESSIBILITY) {
42         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
43             "ohos.permission.CONNECT_ACCESSIBILITY_EXTENSION");
44     } else if (extensionType == AppExecFwk::ExtensionAbilityType::STATICSUBSCRIBER) {
45         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
46             "ohos.permission.CONNECT_STATIC_SUBSCRIBER_EXTENSION");
47     } else if (extensionType == AppExecFwk::ExtensionAbilityType::WALLPAPER) {
48         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
49             "ohos.permission.CONNECT_WALLPAPER_EXTENSION");
50     } else if (extensionType == AppExecFwk::ExtensionAbilityType::BACKUP) {
51         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
52             "ohos.permission.CONNECT_BACKUP_EXTENSION");
53     } else if (extensionType == AppExecFwk::ExtensionAbilityType::ENTERPRISE_ADMIN) {
54         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
55             "ohos.permission.CONNECT_ENTERPRISE_ADMIN_EXTENSION");
56     } else if (extensionType == AppExecFwk::ExtensionAbilityType::PRINT) {
57         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
58             "ohos.permission.CONNECT_PRINT_EXTENSION");
59     } else if (extensionType == AppExecFwk::ExtensionAbilityType::VPN) {
60         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
61             "ohos.permission.CONNECT_VPN_EXTENSION");
62     } else {
63         checkRet = CheckSAPermissionMore(extensionType);
64     }
65     if (!checkRet) {
66         TAG_LOGE(AAFwkTag::ABILITYMGR, "SA connect permission verification failed.");
67         return false;
68     }
69 
70     return true;
71 }
72 
CheckSAPermissionMore(const AppExecFwk::ExtensionAbilityType & extensionType)73 bool ExtensionPermissionsUtil::CheckSAPermissionMore(const AppExecFwk::ExtensionAbilityType &extensionType)
74 {
75     auto checkRet = false;
76     if (extensionType == AppExecFwk::ExtensionAbilityType::FILEACCESS_EXTENSION) {
77         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
78             "ohos.permission.CONNECT_FILE_ACCESS_EXTENSION");
79     } else if (extensionType == AppExecFwk::ExtensionAbilityType::REMOTE_NOTIFICATION) {
80         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
81             "ohos.permission.CONNECT_REMOTE_NOTIFICATION_EXTENSION");
82     } else if (extensionType == AppExecFwk::ExtensionAbilityType::REMOTE_LOCATION) {
83         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
84             "ohos.permission.CONNECT_REMOTE_LOCATION_EXTENSION");
85     } else if (extensionType == AppExecFwk::ExtensionAbilityType::PUSH) {
86         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
87             "ohos.permission.CONNECT_PUSH_EXTENSION");
88     } else if (extensionType == AppExecFwk::ExtensionAbilityType::VOIP) {
89         checkRet = PermissionVerification::GetInstance()->VerifyCallingPermission(
90             "ohos.permission.CONNECT_VOIP_EXTENSION");
91     } else {
92         TAG_LOGI(AAFwkTag::ABILITYMGR, "No need connect permission for extension type %{public}d.", extensionType);
93         return true;
94     }
95 
96     return checkRet;
97 }
98 
99 } // namespace AAFwk
100 } // namespace OHOS
101