tree 0e6316f1fdc0a918cd1007db04bffcc40ca12ce1
parent 4707e2b64db6c5d06a1b663f1000562b786d5a06
author Sunny Goyal <sunnygoyal@google.com> 1473370326 -0700
committer Sunny Goyal <sunnygoyal@google.com> 1474488740 +0000

Preventing a shortcut which requires permissions from being added to
homescreen

A shortcut can be added by any app as INSTALL_SHORTCUT is a normal
level permission. But the intent is actually launched by the launcher
app which can have other permission as well.

> When adding a shortcut from the broadcast, verify that the intent does
not require any permission
> When adding a shortcut using the two-step drop process, verify that
the source app also has the permission to create such a shortcut

Bug: 30778130
Change-Id: I33a391bc0af81248aaff4459aaa79d1adc77926b
(cherry picked from commit fb5096d07bb3bb59fd4b5db6b68613030169b4bd)