From 81b60edfa07df9a9a9ffa61b6023792cb8ed8049 Mon Sep 17 00:00:00 2001
From: Elvis Capia <ecapia@google.com>
Date: Fri, 10 Jan 2025 18:15:04 -0500
Subject: [PATCH] Ask user to grant INTERNET permission + grant all-files
 access

---
 capture_service/android_application.cc | 31 ++++++++++++++++++++++++++
 capture_service/android_application.h  |  2 ++
 2 files changed, 33 insertions(+)

diff --git a/capture_service/android_application.cc b/capture_service/android_application.cc
index 8dd11951..f80f3e4e 100644
--- a/capture_service/android_application.cc
+++ b/capture_service/android_application.cc
@@ -182,6 +182,8 @@ VulkanApplication::~VulkanApplication()
 absl::Status VulkanApplication::Setup()
 {
     LOGD("Setup Vulkan application: %s\n", m_package.c_str());
+    RETURN_IF_ERROR(HasInternetPermission());
+    RETURN_IF_ERROR(GrantAllFilesAccess());
     RETURN_IF_ERROR(m_dev.Adb().Run("root"));
     RETURN_IF_ERROR(m_dev.Adb().Run("wait-for-device"));
     Stop().IgnoreError();
@@ -294,9 +296,36 @@ absl::Status AndroidApplication::GfxrSetup()
     return absl::OkStatus();
 }
 
+absl::Status AndroidApplication::HasInternetPermission()
+{
+    const std::string cmd = absl::
+    StrFormat("shell dumpsys package %s | grep 'android.permission.INTERNET: granted=true'",
+              m_package);
+    auto res = m_dev.Adb().RunAndGetResult(cmd);
+    if (!res.ok())
+    {
+        return res.status();
+    }
+    if ((*res).empty())
+    {
+        return absl::Status(absl::StatusCode::kUnknown,
+                            "The android.permission.INTERNET permission wasn't granted. Add it to "
+                            "your AndroidManifest.xml file");
+    }
+    return absl::OkStatus();
+}
+
+absl::Status AndroidApplication::GrantAllFilesAccess()
+{
+    return m_dev.Adb().Run(
+    absl::StrFormat("shell appops set --uid %s MANAGE_EXTERNAL_STORAGE allow", m_package));
+}
+
 absl::Status OpenXRApplication::Setup()
 {
     LOGD("OpenXRApplication %s Setup\n", m_package.c_str());
+    RETURN_IF_ERROR(HasInternetPermission());
+    RETURN_IF_ERROR(GrantAllFilesAccess());
     RETURN_IF_ERROR(m_dev.Adb().Run("root"));
     RETURN_IF_ERROR(m_dev.Adb().Run("wait-for-device"));
     RETURN_IF_ERROR(m_dev.Adb().Run("remount"));
@@ -357,6 +386,8 @@ VulkanCliApplication::~VulkanCliApplication()
 // the global path.
 absl::Status VulkanCliApplication::Setup()
 {
+    RETURN_IF_ERROR(HasInternetPermission());
+    RETURN_IF_ERROR(GrantAllFilesAccess());
     RETURN_IF_ERROR(m_dev.Adb().Run("root"));
     RETURN_IF_ERROR(m_dev.Adb().Run("wait-for-device"));
     RETURN_IF_ERROR(m_dev.Adb().Run(absl::StrFormat("shell mkdir -p %s", kVulkanGlobalPath)));
diff --git a/capture_service/android_application.h b/capture_service/android_application.h
index 5f63100b..071e677d 100644
--- a/capture_service/android_application.h
+++ b/capture_service/android_application.h
@@ -60,6 +60,8 @@ class AndroidApplication
     };
     absl::Status CreateGfxrDirectory(const std::string command_args);
     absl::Status GfxrSetup();
+    absl::Status HasInternetPermission();
+    absl::Status GrantAllFilesAccess();
 
 protected:
     absl::Status ParsePackage();