I've run into this exact issue before.
My fix was to add Binder.clearCallingIdentity() in my RemoteViewsService
callbacks where I needed to access my non-exported provider.
Now we're back from the launcher's identity to the identity of the app's
process, where access is allowed.
It fit into the code structure like this:
public static class MyWidgetService extends RemoteViewsService {
@Override
public RemoteViewsFactory onGetViewFactory(Intent intent) {
return new MyWidgetRemoteViewsFactory(getApplicationContext(), intent);
}
}
private static class MyWidgetRemoteViewsFactory implements
RemoteViewsService.RemoteViewsFactory {
...
@Override
public void onDataSetChanged() {
MyLog.i(TAG, "onDataSetChanged");
* // Revert back to our process' identity so we can work with our content
provider*
* long identityToken = Binder.clearCallingIdentity();*
try {
// Query the message list
Cursor listCursor = mContent.queryList(LIST_ITEM_LIMIT);
if (listCursor != null) {
try {
....
} finally {
listCursor.close();
}
}
} finally {
* // Restore the identity - not sure if it's needed since we're going to
return right here, but*
* // it just *seems* cleaner*
* Binder.restoreCallingIdentity(identityToken);*
}
}
The only place where MyWidgetRemoteViewsFactory uses the content provider
is its onDataSetChanged() -- contrary to proimises made by the
documentation, I've decided to play it safe and avoid keeping an open
cursor during the lifetime of the factory.
If your factory keeps an open cursor outside of one method's scope, you may
need this trick in the other methods as well.
-- K
2012/8/4 NickL <nicklongi...@gmail.com>
> Error accessing content provider in RemoteViewService
>
> Hi,
>
> I'm trying to build a home screen widget for my app and I am using
> stackview, remoteviewservice. In the RemoteViewsService, I need to query
> the content provider. My cotent provider is set exported=false. However,
> when I want to add the widget on screen, I get this error
> java.lang.SecurityException: Permission Denial: reading
> com.xxx.android.provider.**yyyContentProvider uri
> content://*com.zzz.an*<http://com.zzz.an/>
> *
> *
> If I set the provider to exported=true, it works well. But I don't want
> this solution. Anyone can helps me? Thanks.
>
> --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to android-developers@googlegroups.com
> To unsubscribe from this group, send email to
> android-developers+unsubscr...@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
