Bug 1227451 - chrome.alarms API doesn't check 'alarms' permission. r=billm

toolkit/components/extensions/ext-alarms.js

@@ -91,7 +91,7 @@ extensions.on("shutdown", (type, extension) => {
 });
 /* eslint-enable mozilla/balanced-listeners */
 
-extensions.registerAPI((extension, context) => {
+extensions.registerPrivilegedAPI("alarms", (extension, context) => {
   return {
     alarms: {
       create: function(...args) {

toolkit/components/extensions/test/mochitest/test_ext_alarms.html

@@ -13,6 +13,32 @@
 <script type="text/javascript">
 "use strict";
 
+ add_task(function* test_alarm_without_permissions() {
+   function backgroundScript() {
+     let ALARM_NAME = "test_ext_alarms";
+     browser.test.log("running alarm script");
+
+     browser.test.assertTrue(!browser.alarms,
+                             "alarm API should not be available if the alarm permission is not required")
+     browser.test.notifyPass("alarms_permission");
+   }
+
+   let extensionData = {
+     background: "(" + backgroundScript.toString() + ")()",
+     manifest: {
+       permissions: [],
+     },
+   };
+
+   let extension = ExtensionTestUtils.loadExtension(extensionData);
+   yield extension.startup();
+   info("extension loaded");
+   yield extension.awaitFinish("alarms_permission");
+   yield extension.unload();
+   info("extension unloaded");
+ });
+
+
 add_task(function* test_alarm_fires() {
   function backgroundScript() {
     let ALARM_NAME = "test_ext_alarms";