1 /*
2  * Copyright (C) 2009 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 package com.android.providers.downloads.permission.tests;
18 
19 import java.io.FileNotFoundException;
20 import java.io.FileOutputStream;
21 import java.io.IOException;
22 
23 import android.content.ContentResolver;
24 import android.content.ContentValues;
25 import android.content.Intent;
26 import android.provider.Downloads;
27 import android.test.AndroidTestCase;
28 import android.test.suitebuilder.annotation.MediumTest;
29 
30 /**
31  * Verify that protected Download provider actions require specific permissions.
32  *
33  * TODO: consider adding test where app has ACCESS_DOWNLOAD_MANAGER, but not
34  * ACCESS_DOWNLOAD_MANAGER_ADVANCED
35  */
36 public class DownloadProviderPermissionsTest extends AndroidTestCase {
37 
38     private ContentResolver mContentResolver;
39 
40     @Override
setUp()41     protected void setUp() throws Exception {
42         super.setUp();
43         mContentResolver = getContext().getContentResolver();
44     }
45 
46     /**
47      * Test that an app cannot access the /cache filesystem
48      * <p>Tests Permission:
49      *   {@link android.Manifest.permission#ACCESS_CACHE_FILESYSTEM}
50      */
51     @MediumTest
testAccessCacheFilesystem()52     public void testAccessCacheFilesystem() throws IOException {
53         try {
54             String filePath = "/cache/this-should-not-exist.txt";
55             FileOutputStream strm = new FileOutputStream(filePath);
56             strm.write("Oops!".getBytes());
57             strm.flush();
58             strm.close();
59             fail("Was able to create and write to " + filePath);
60         } catch (SecurityException e) {
61             // expected
62         } catch (FileNotFoundException e) {
63             // also could be expected
64         }
65     }
66 
67     /**
68      * Test that an untrusted app cannot write to the download provider
69      * <p>Tests Permission:
70      *   {@link com.android.providers.downloads.Manifest.permission#ACCESS_DOWNLOAD_MANAGER}
71      *   and
72      *   {@link android.Manifest.permission#INTERNET}
73      */
74     @MediumTest
testWriteDownloadProvider()75     public void testWriteDownloadProvider() {
76         try {
77             ContentValues values = new ContentValues();
78             values.put(Downloads.Impl.COLUMN_URI, "foo");
79             mContentResolver.insert(Downloads.Impl.CONTENT_URI, values);
80             fail("write to provider did not throw SecurityException as expected.");
81         } catch (SecurityException e) {
82             // expected
83         }
84     }
85 
86     /**
87      * Test that an untrusted app cannot access the download service
88      * <p>Tests Permission:
89      *   {@link com.android.providers.downloads.Manifest.permission#ACCESS_DOWNLOAD_MANAGER}
90      */
91     @MediumTest
testStartDownloadService()92     public void testStartDownloadService() {
93         try {
94             Intent downloadServiceIntent = new Intent();
95             downloadServiceIntent.setClassName("com.android.providers.downloads",
96                     "com.android.providers.downloads.DownloadService");
97             getContext().startService(downloadServiceIntent);
98             fail("starting download service did not throw SecurityException as expected.");
99         } catch (SecurityException e) {
100             // expected
101         }
102     }
103 }
104