Enforce cross profile clipboard access settings

Author: quh4gko8

services/core/java/com/android/server/clipboard/ClipboardService.java

@@ -953,6 +953,10 @@ private void setPrimaryClipInternalLocked(
         }
         setPrimaryClipInternalLocked(clipboard, clip, uid, sourcePackage);
 
+        if (!android.ext.settings.CrossProfileClipboardAccessSettings
+                .isExportAccessAllowed(getContext(), userId)) {
+            return;
+        }
         // Update related users
         List<UserInfo> related = getRelatedProfiles(userId);
         if (related != null) {
@@ -984,6 +988,10 @@ private void setPrimaryClipInternalLocked(
                     if (id != userId) {
                         final boolean canCopyIntoProfile = !hasRestriction(
                                 UserManager.DISALLOW_SHARE_INTO_MANAGED_PROFILE, id);
+                        if (!android.ext.settings.CrossProfileClipboardAccessSettings
+                                .isImportAccessAllowed(getContext(), id)) {
+                            continue;
+                        }
                         if (canCopyIntoProfile) {
                             Clipboard relatedClipboard = getClipboardLocked(id, deviceId);
                             if (relatedClipboard != null) {

services/core/java/com/android/server/wm/DragState.java

@@ -500,6 +500,10 @@ void broadcastDragStartedLocked(final float touchX, final float touchY) {
         final UserManagerInternal userManager = LocalServices.getService(UserManagerInternal.class);
         mCrossProfileCopyAllowed = !userManager.getUserRestriction(
                 mSourceUserId, UserManager.DISALLOW_CROSS_PROFILE_COPY_PASTE);
+        if (!android.ext.settings.CrossProfileClipboardAccessSettings
+                .isExportAccessAllowed(mDisplayContent.mAtmService.mContext, mSourceUserId)) {
+            mCrossProfileCopyAllowed = false;
+        }
 
         if (DEBUG_DRAG) {
             Slog.d(TAG_WM, "Broadcasting DRAG_STARTED at (" + touchX + ", " + touchY + ")");