Jiri, That won't work as the component you get is actually your component (the one that received the intent) and not the calling component according to the documentation.
I guess what I need to do is actually have the calling application specify who they are (partial trust) and check the application they say they are to make sure they really wanted to bind to me. I'm not a big fan of this approach as it requires they implement something on their end to handle trust negotations when the system (as far as I can tell) could just let the receiving component know who sent the intent. There are also issues with that approach as well that I'd have to deal with. Thanks, Jonathan Herriott On Aug 18, 11:30 am, Jiri <[email protected]> wrote: > COuld you maybe use > > intent.getComponent() and then use the packageManager its > getReceiverInfo(componentName); > > http://developer.android.com/reference/android/content/pm/PackageMana...) > > Not sure if this is what you need, or if it is the best solution. > > Jiri > > > > Jonathan Herriott wrote: > > I was wondering if there is a way to determine who passed an intent to > > my application. For example, I have a service, that I want to act > > differently depending on who passed the intent (for security > > reasons). I'm trying to sandbox each calling application, so they > > only have access to their data stored in my application. > > > For it to be secure, I cannot trust any application to be truthful > > about the identifying data it is passing into my service. Therefore, > > I need some system way of identifying who sent the intent in a way > > that the calling application cannot change that information. I don't > > know if it is possible, but I can't find anything in the Intent class, > > and I was wondering if there may be another structure which does what > > I want it to. If it is not possible, I would like to get some type of > > mechanism to do this in the roadmap. > > > Thanks, > > Jonathan Herriott --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -~----------~----~----~----~------~----~------~--~---
