From 087b827fe05cdfee702f3f4034759c2230c843a0 Mon Sep 17 00:00:00 2001
From: wuzhihuitmac <wuzhihui4@huawei.com>
Date: Wed, 14 May 2025 15:40:33 +0800
Subject: [PATCH] Add permission check for setdevicestatus

Signed-off-by: wuzhihuitmac <wuzhihui4@huawei.com>
Change-Id: I8cc7b886d07a337e0c44602fce932e5bb0cfe634
---
 services/src/sensor_service.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/services/src/sensor_service.cpp b/services/src/sensor_service.cpp
index 132203d9..b2c1290f 100644
--- a/services/src/sensor_service.cpp
+++ b/services/src/sensor_service.cpp
@@ -816,6 +816,11 @@ void SensorService::PermStateChangeCb::PermStateChangeCallback(Security::AccessT
 ErrCode SensorService::SetDeviceStatus(uint32_t deviceStatus)
 {
     SEN_HILOGI("SetDeviceStatus in, deviceStatus:%{public}d", deviceStatus);
+    PermissionUtil &permissionUtil = PermissionUtil::GetInstance();
+    if (!permissionUtil.IsNativeToken(GetCallingTokenID())) {
+        SEN_HILOGE("TokenType is not TOKEN_NATIVE");
+        return PERMISSION_DENIED;
+    }
     clientInfo_.SetDeviceStatus(deviceStatus);
     return ERR_OK;
 }
-- 
Gitee