java.lang.SecurityException:权限被拒绝:打开提供者

java.lang.SecurityException: Permission Denial: opening provider

我使用以下方式启动图像选择器意图:

final Intent pickIntent = new Intent(Intent.ACTION_PICK, MediaStore.Images.Media.EXTERNAL_CONTENT_URI);
pickIntent.putExtra(Intent.EXTRA_ALLOW_MULTIPLE, true);
startActivityForResult(intent, PICK_IMAGE);

并在 onActivityResult() 中,我获取了所有选取图像的 uri,并在后台启动 运行 的作业并上传这些图像 (https://github.com/yigit/android-priority-jobqueue)。但是,如果我按下后退按钮并退出 activity,则任何未启动的作业在 运行 时都无法访问选取的图像并抛出异常:

java.lang.SecurityException: Permission Denial: opening provider com.google.android.apps.photos.contentprovider.MediaContentProvider from ProcessRecord{...} (pid=2407, uid=10117) that is not exported from uid 10123

它发生的原因是因为一旦 activity 完成,权限就会被撤销。根据文档 https://developer.android.com/guide/topics/providers/content-provider-basics.html:

These are permissions for a specific content URI that last until the activity that receives them is finished.

我的问题是,是否有解决方法?比如在应用程序级别获得许可之类的?

解决这个问题的替代方法是什么?一个快速的解决方案似乎是复制所有选择的图像,然后上传它们,但这似乎是最后的手段。

注意: 尝试从 uri 获取文件名是错误的。不要这样做!内容提供者还可以共享不存在于任何文件中的任意数据,或者文件名可能具有误导性。例如。 content://downloads/some_secret_data 可能指向不在 downloads 文件夹中的文件。

所以最好的办法是 read/copy 立即从内容提供商那里获取数据,然后使用该数据做任何你想做的事。就我而言,我正在上传它。


上一个错误答案(不要做!):

这就是我所做的,对我来说效果很好。如果有人有更好的解决方案,请分享。 我有 android.permission.READ_EXTERNAL_STORAGE,所以当用户选择图像时,我使用了具体的文件路径,而不是 onActivityResult() 中返回的 uris。为了检索文件路径,我使用了这个方便的 class 瞧!

I solved this issue by the following code: When we get image from google photos app we need to require realPath for image

//get Path
@TargetApi(Build.VERSION_CODES.KITKAT)
public String getRealPathFromURI(final Uri uri) {
    final boolean isKitKat = Build.VERSION.SDK_INT >= Build.VERSION_CODES.KITKAT;

    // DocumentProvider
    if (isKitKat && DocumentsContract.isDocumentUri(context, uri)) {
        // ExternalStorageProvider
        if (isExternalStorageDocument(uri)) {
            final String docId = DocumentsContract.getDocumentId(uri);
            final String[] split = docId.split(":");
            final String type = split[0];

            if ("primary".equalsIgnoreCase(type)) {
                return Environment.getExternalStorageDirectory() + "/" + split[1];
            }
        }
        // DownloadsProvider
        else if (isDownloadsDocument(uri)) {
            final String id = DocumentsContract.getDocumentId(uri);
            final Uri contentUri = ContentUris.withAppendedId(
                    Uri.parse("content://downloads/public_downloads"), Long.valueOf(id));

            return getDataColumn(contentUri, null, null);
        }
        // MediaProvider
        else if (isMediaDocument(uri)) {
            final String docId = DocumentsContract.getDocumentId(uri);
            final String[] split = docId.split(":");
            final String type = split[0];

            Uri contentUri = null;
            if ("image".equals(type)) {
                contentUri = MediaStore.Images.Media.EXTERNAL_CONTENT_URI;
            } else if ("video".equals(type)) {
                contentUri = MediaStore.Video.Media.EXTERNAL_CONTENT_URI;
            } else if ("audio".equals(type)) {
                contentUri = MediaStore.Audio.Media.EXTERNAL_CONTENT_URI;
            }

            final String selection = "_id=?";
            final String[] selectionArgs = new String[]{
                    split[1]
            };

            return getDataColumn(contentUri, selection, selectionArgs);
        }
    }
    // MediaStore (and general)
    else if ("content".equalsIgnoreCase(uri.getScheme())) {
        // Return the remote address
        if (isGooglePhotosUri(uri))
            return uri.getLastPathSegment();

        return getDataColumn(uri, null, null);
    }
    // File
    else if ("file".equalsIgnoreCase(uri.getScheme())) {
        return uri.getPath();
    } else
        return getRealPathFromURIDB(uri);

    return null;
}

/**
 * Gets real path from uri.
 *
 * @param contentUri the content uri
 * @return the real path from uri
 */
private String getRealPathFromURIDB(Uri contentUri) {
    Cursor cursor = context.getContentResolver().query(contentUri, null, null, null, null);
    if (cursor == null) {
        return contentUri.getPath();
    } else {
        cursor.moveToFirst();
        int index = cursor.getColumnIndex(MediaStore.Images.ImageColumns.DATA);
        String realPath = cursor.getString(index);
        cursor.close();
        return realPath;
    }
}

/**
 * Gets data column.
 *
 * @param uri           the uri
 * @param selection     the selection
 * @param selectionArgs the selection args
 * @return the data column
 */
public String getDataColumn(Uri uri, String selection,
                                   String[] selectionArgs) {
    Cursor cursor = null;
    final String column = "_data";
    final String[] projection = {
            column
    };

    try {
        cursor = context.getContentResolver().query(uri, projection, selection, selectionArgs,
                null);
        if (cursor != null && cursor.moveToFirst()) {
            final int index = cursor.getColumnIndexOrThrow(column);
            return cursor.getString(index);
        }
    } finally {
        if (cursor != null)
            cursor.close();
    }
    return null;
}

/**
 * Is external storage document boolean.
 *
 * @param uri The Uri to check.
 * @return Whether the Uri authority is ExternalStorageProvider.
 */
public boolean isExternalStorageDocument(Uri uri) {
    return "com.android.externalstorage.documents".equals(uri.getAuthority());
}

/**
 * Is downloads document boolean.
 *
 * @param uri The Uri to check.
 * @return Whether the Uri authority is DownloadsProvider.
 */
public boolean isDownloadsDocument(Uri uri) {
    return "com.android.providers.downloads.documents".equals(uri.getAuthority());
}

/**
 * Is media document boolean.
 *
 * @param uri The Uri to check.
 * @return Whether the Uri authority is MediaProvider.
 */
public boolean isMediaDocument(Uri uri) {
    return "com.android.providers.media.documents".equals(uri.getAuthority());
}

/**
 * Is google photos uri boolean.
 *
 * @param uri The Uri to check.
 * @return Whether the Uri authority is Google Photos.
 */
public boolean isGooglePhotosUri(Uri uri) {
    return "com.google.android.apps.photos.content".equals(uri.getAuthority());
}

Now in the onActivityResult method:

   @Override
   public void onActivityResult(int requestCode, int resultCode, Intent data) {
    super.onActivityResult(requestCode, resultCode, data);
    if (resultCode == Activity.RESULT_OK) {
        if (requestCode == ChoosePhoto.CHOOSE_PHOTO_INTENT) {
            if (data != null && data.getData() != null) {
                handleGalleryResult(data);
            } else {
                handleCameraResult(choosePhoto.getCameraUri());
            }
        } else if (requestCode == ChoosePhoto.SELECTED_IMG_CROP) {
            mImgProfile.setImageURI(choosePhoto.getCropImageUrl());
        }
    }
}

Now in the handleGalleryResult method:

public void handleGalleryResult(Intent data) {
    try {
        cropPictureUrl = Uri.fromFile(createImageTempFile(Environment.getExternalStoragePublicDirectory(Environment.DIRECTORY_PICTURES)));
        String realPathFromURI = FileUtil.getRealPathFromURI(data.getData());
        File file = new File(realPathFromURI);
        if(file.exists()) {
            if(currentAndroidDeviceVersion>23){
                cropImage(FileProvider.getUriForFile(mContext, mContext.getApplicationContext().getPackageName() + ".provider", file), cropPictureUrl);
            }else{
                cropImage(Uri.fromFile(file), cropPictureUrl);
            }

        } else
            cropImage(data.getData(), cropPictureUrl);
    } catch (IOException e) {
        e.printStackTrace();
    }
}

createImageTempFile :

@SuppressLint("SimpleDateFormat")
public File createImageTempFile(File filePathDir) throws IOException {
    String timeStamp = new SimpleDateFormat("yyyyMMdd_HHmmss").format(new Date());

    String imageFileName = "JPEG_" + timeStamp + "_";
    return File.createTempFile(
            imageFileName,  /* prefix */
            ".jpg",         /* suffix */
            filePathDir      /* directory */
    );
}

这个问题有比关于 read/copy 的公认答案更好的解决方案。

基本上您必须使用不同的意图并请求永久的 Uri 权限,该权限在您重新启动后仍然存在。

解决方法在这里: