diff options
| author | Nick Kralevich <nnk@google.com> | 2010-10-15 09:24:39 -0700 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2010-10-15 09:24:39 -0700 |
| commit | 86052a87409e7ceac654ffebbb9bcfce1597c5d8 (patch) | |
| tree | 0e43880cd24c66479f54dbb75ead1effb1266968 | |
| parent | cb90947bf8ed2c898c1b7e529dd0c99d112ed611 (diff) | |
| parent | 66f1c459ac15d1dba1850cb30759500d35078f29 (diff) | |
| download | frameworks_base-86052a87409e7ceac654ffebbb9bcfce1597c5d8.zip frameworks_base-86052a87409e7ceac654ffebbb9bcfce1597c5d8.tar.gz frameworks_base-86052a87409e7ceac654ffebbb9bcfce1597c5d8.tar.bz2 | |
am 66f1c459: Merge "Update the documentation for content provider security." into gingerbread
Merge commit '66f1c459ac15d1dba1850cb30759500d35078f29' into gingerbread-plus-aosp
* commit '66f1c459ac15d1dba1850cb30759500d35078f29':
Update the documentation for content provider security.
| -rw-r--r-- | docs/html/guide/topics/manifest/provider-element.jd | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/docs/html/guide/topics/manifest/provider-element.jd b/docs/html/guide/topics/manifest/provider-element.jd index c80b207..bee87e6 100644 --- a/docs/html/guide/topics/manifest/provider-element.jd +++ b/docs/html/guide/topics/manifest/provider-element.jd @@ -96,10 +96,19 @@ If "{@code false}", the provider is available only to components of the same application or applications with the same user ID. The default value is "{@code true}". -<p> -You can export a content provider but still limit access to it with the -<code><a href="{@docRoot}guide/topics/manifest/provider-element.html#prmsn">permission</a></code> attribute. -</p></dd> +<p>You can export a content provider but still limit access to it with the +<code><a +href="{@docRoot}guide/topics/manifest/provider-element.html#prmsn">permission</a></code> +attribute. Note that due to a bug in versions of Android prior to {@link +android.os.Build.VERSION_CODES#VERSION_GINGERBREAD} providers were exported +even if {@code android:exported} were set to {@code false}. Therefore, for +provider security on all devices, protect your provider with a +signature-level permission. For information on defining a permission, see +the <a +href="{@docRoot}guide/topics/manifest/permission-element.html">permission +element</a>. For information on using the permission, see the <a +href="{@docRoot}guide/topics/manifest/uses-permission-element.html">uses-permission +element</a>.</p></dd> <dt><a name="gprmsn"></a>{@code android:grantUriPermissions}</dt> <dd>Whether or not those who ordinarily would not have permission to |