diff options
| author | Cassie Wang <cassiewang@google.com> | 2021-07-16 13:03:19 -0700 |
|---|---|---|
| committer | Cassie Wang <cassiewang@google.com> | 2021-07-19 16:17:29 -0700 |
| commit | 3ce6aba4030fbe93a1b5590ee6039f35cdce27b9 (patch) | |
| tree | f958097a9c64ddf0e09bee1fcf8b6676fdc76c17 /docs/html/sdk/api_diff/15 | |
| parent | 5235bc493d96b7622b5154f7640dc5e30e6d6739 (diff) | |
Ensure calling user is the same as requested user.
This prevents any cross-user requests. Cross-user requests are already
not allowed, but due to a bug elsewhere in the code. This intentionally
handles the case and also throws a SecurityException.
Bug: 193903221
Test: presubmit
Test: manually checked cross-user requests get an exception.
Change-Id: I5bd867b86b972452daa2d8253f3c19f059a8a4b3
Diffstat (limited to 'docs/html/sdk/api_diff/15')
0 files changed, 0 insertions, 0 deletions