Secondary users can only see own use data

Refs #1563
M66B · Mar 16, 2014 · 8d39535 · 8d39535
1 parent 0b54299
commit 8d39535
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/biz/bokhorst/xprivacy/PrivacyService.java b/src/biz/bokhorst/xprivacy/PrivacyService.java
@@ -792,6 +792,7 @@ public List<PRestriction> getUsageList(int uid, String restrictionName) throws R
 			try {
 				enforcePermission(-1);
 				SQLiteDatabase dbUsage = getDbUsage();
+				int userId = Util.getUserId(Binder.getCallingUid());
 
 				mLockUsage.readLock().lock();
 				dbUsage.beginTransaction();
@@ -830,7 +831,8 @@ public List<PRestriction> getUsageList(int uid, String restrictionName) throws R
 								data.restricted = (cursor.getInt(3) > 0);
 								data.time = cursor.getLong(4);
 								data.extra = cursor.getString(5);
-								result.add(data);
+								if (userId == 0 || Util.getUserId(data.uid) == userId)
+									result.add(data);
 							}
 						} finally {
 							cursor.close();