diff options
| author | Nick Kralevich <nnk@google.com> | 2010-10-15 09:17:12 -0700 |
|---|---|---|
| committer | Android (Google) Code Review <android-gerrit@google.com> | 2010-10-15 09:17:12 -0700 |
| commit | 66f1c459ac15d1dba1850cb30759500d35078f29 (patch) | |
| tree | 23a256c333e791d4463ec08d5d937b2a43f4c577 /docs | |
| parent | e1f3976bb4eab0d7c46bc8596679d4d00695148c (diff) | |
| parent | 4fe4d4c91cdfa59bb8161625be85252e187667a2 (diff) | |
| download | frameworks_base-66f1c459ac15d1dba1850cb30759500d35078f29.zip frameworks_base-66f1c459ac15d1dba1850cb30759500d35078f29.tar.gz frameworks_base-66f1c459ac15d1dba1850cb30759500d35078f29.tar.bz2 | |
Merge "Update the documentation for content provider security." into gingerbread
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/html/guide/topics/manifest/provider-element.jd | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/docs/html/guide/topics/manifest/provider-element.jd b/docs/html/guide/topics/manifest/provider-element.jd index c80b207..bee87e6 100644 --- a/docs/html/guide/topics/manifest/provider-element.jd +++ b/docs/html/guide/topics/manifest/provider-element.jd @@ -96,10 +96,19 @@ If "{@code false}", the provider is available only to components of the same application or applications with the same user ID. The default value is "{@code true}". -<p> -You can export a content provider but still limit access to it with the -<code><a href="{@docRoot}guide/topics/manifest/provider-element.html#prmsn">permission</a></code> attribute. -</p></dd> +<p>You can export a content provider but still limit access to it with the +<code><a +href="{@docRoot}guide/topics/manifest/provider-element.html#prmsn">permission</a></code> +attribute. Note that due to a bug in versions of Android prior to {@link +android.os.Build.VERSION_CODES#VERSION_GINGERBREAD} providers were exported +even if {@code android:exported} were set to {@code false}. Therefore, for +provider security on all devices, protect your provider with a +signature-level permission. For information on defining a permission, see +the <a +href="{@docRoot}guide/topics/manifest/permission-element.html">permission +element</a>. For information on using the permission, see the <a +href="{@docRoot}guide/topics/manifest/uses-permission-element.html">uses-permission +element</a>.</p></dd> <dt><a name="gprmsn"></a>{@code android:grantUriPermissions}</dt> <dd>Whether or not those who ordinarily would not have permission to |