chromium/chrome/browser/ash/dbus/org.chromium.ScreenLockService.conf

<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!--
  Copyright 2018 The Chromium Authors
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->
<busconfig>
  <policy user="chronos">
    <allow own="org.chromium.ScreenLockService"/>
    <allow receive_sender="org.chromium.ScreenLockService"
           receive_interface="org.chromium.ScreenLockServiceInterface"/>
    <allow send_destination="org.chromium.ScreenLockService"/>
  </policy>

  <!--
      session_manager uses this service to ask Chrome to show the lock screen.
      TODO(b/289228842): Remove the policy for root.
  -->
  <policy user="root">
    <allow send_destination="org.chromium.ScreenLockService"
           send_interface="org.chromium.ScreenLockServiceInterface"/>
  </policy>

  <policy user="session_manager">
    <allow send_destination="org.chromium.ScreenLockService"
           send_interface="org.chromium.ScreenLockServiceInterface"/>
  </policy>
</busconfig>