1# Ability Framework Changelog
2
3## cl.ability.1 Unauthorized URIs Are Blocked When want Is Used to Share File URIs
4
5**Access Level**
6
7Public API
8
9**Reason for Change**
10
11
12If the authorization flag is enabled in the **flags** field of **want**, it is forbidden to pass unauthorized [file URIs](../../../application-dev/reference/apis-core-file-kit/js-apis-file-fileuri.md#fileuri10) into the **URI** field of **want** or into the **wantConstant.Params.PARAMS_STREAM** field.
13
14> **NOTE**
15>
16> An authorized URI is the URI converted from the application sandbox path through [getUriFromPath](../../../application-dev/reference/apis-core-file-kit/js-apis-file-fileuri.md#fileurigeturifrompath) or a persistent file URI.
17
18**Change Impact**
19
20This change is a non-compatible change.
21
22Before change:
23
24During file sharing using **want**, if the authorization flag is enabled in the **flags** field of **want**, the URIs set in the **URI** field of **want** and the **wantConstant.Params.PARAMS_STREAM** field are always transparently transmitted.
25
26After change:
27
28During file sharing using **want**, if the authorization flag is enabled in the **flags** field of **want**, unauthorized URIs set in the **URI** field of **want** and the **wantConstant.Params.PARAMS_STREAM** field are not passed.
29
30The file URI interception rules are as follows:
31
321. If the **URI** field in **want** is a file URI and the authorizing party does not have the permission to use the URI, the URI field is erased.
332. In the **WantConstant.Params.PARAMS_STREAM** field, the file URIs that the authorizing party does not have permission to access will be erased.
343. After the URI field in **want** is combined with the file URI field in **WantConstant.Params.PARAMS_STREAM**, the part that exceeds 500 will be truncated.
35
36
37**Start API Level**
38
399
40
41**Change Since**
42
43OpenHarmony SDK 5.0.0.41
44
45**Key API/Component Changes**
46
47N/A
48
49**Adaptation Guide**
50
51No adaptation is required.
52