ContentResolver.query()访问联系人时的安全例外

时间:2013-07-15 17:19:04

标签: android android-contacts android-permissions

我有以下Java代码,用于访问基于特定thread_id参与对话的所有联系人。 更新此代码位于应用程序导入的库中。 DONE UPDATE

private ArrayList<Contact> getContactsFromThreadId(long threadId) {
    ArrayList<Contact> contacts = new ArrayList<Contact>();

    /** TODO set up projection this is inefficient */
    Cursor allCursor = mContext.getContentResolver().query(SMS_INBOX, null, null, null, null);
    String [] info = new String[allCursor.getColumnCount()];
    for( int i = 0; i < allCursor.getColumnCount(); i++) {
        info[i] = allCursor.getColumnName(i);
    }

    Cursor cursor = mContext.getContentResolver().query(SMS_INBOX, info, THREAD_ID + threadId, null, SORT_ORDER);
    if (cursor != null) {
        try {
            if (cursor.moveToFirst()) {
                do {
                    long id = cursor.getLong(0);
                    String[] projection = {Phone.NUMBER, ContactsContract.PhoneLookup.DISPLAY_NAME}; 
                    Cursor contactCursor = mContext.getContentResolver().query(PHONE_CONTACTS, projection, USER_ID + id, null, null);
                    String number = "";
                    String name = "";
                    if (contactCursor.moveToFirst()) {
                        int numberColumn = contactCursor.getColumnIndex(projection[0]);
                        number = contactCursor.getString(numberColumn);
                        int nameColumn = contactCursor.getColumnIndex(projection[1]);
                        name = contactCursor.getString(nameColumn);
                    }
                    contacts.add(new Contact(id, number, name));
                } while (cursor.moveToNext());
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        cursor.close();
    }

    return contacts;
}

当运行上面的代码时,我从以下行捕获SecurityException:

// private final Uri PHONE_CONTACTS = Uri.parse("content://contacts");
Cursor contactCursor = mContext.getContentResolver().query(PHONE_CONTACTS, projection, USER_ID + id, null, null);

堆栈跟踪报告:

07-15 10:11:00.468: W/System.err(20527): java.lang.SecurityException: Permission Denial: reading com.android.providers.contacts.ContactsProvider2 uri content://contacts from pid=20527, uid=10140 requires android.permission.READ_CONTACTS

所以我将以下内容添加到主要活动声明之外的主清单文件中:

<!-- I ADDED THIS LINE -->
<uses-permission android:name="android.permission.READ_CONCACTS" />

更新

<uses-sdk
    android:minSdkVersion="9"
    android:targetSdkVersion="17" />

<uses-permission android:name="android.permission.WRITE_SMS" />
<uses-permission android:name="android.permission.READ_SMS" />
<uses-permission android:name="android.permission.RECEIVE_SMS" />
<uses-permission android:name="android.permission.READ_CONTACTS" />
<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" />

<application
    android:allowBackup="true"
    android:icon="@drawable/ic_launcher"
    android:label="@string/app_name"
    android:theme="@style/AppTheme" >
    <activity...></activity>

3 个答案:

答案 0 :(得分:1)

你有一个错字。

<uses-permission android:name="android.permission.READ_CONCACTS" />

应该是

<uses-permission android:name="android.permission.READ_CONTACTS" />

答案 1 :(得分:0)

尝试更改android:targetSdkVersion="14"或低于16

<uses-sdk
    android:minSdkVersion="9"
    android:targetSdkVersion="14" />

答案 2 :(得分:0)

问题的解决方案是改变:

private final Uri PHONE_CONTACTS = Uri.parse("content://contacts");

要:

private final Uri PHONE_CONTACTS = CommonDataKinds.Phone.CONTENT_URI;

来自:

的查询
Cursor contactCursor = mContext.getContentResolver().query(PHONE_CONTACTS, projection, USER_ID + id, null, null);

要:

Cursor contactCursor = mContext.getContentResolver().query(PHONE_CONTACTS, null, CommonDataKinds.Phone.CONTACT_ID +" = "+id, null, SORT_ORDER);

按照Karakuri的建议更改我的清单文件中的拼写错误。

相关问题