1e41f4b71Sopenharmony_ci# Ability Framework Changelog 2e41f4b71Sopenharmony_ci 3e41f4b71Sopenharmony_ci## cl.ability.1 Unauthorized URIs Are Blocked When want Is Used to Share File URIs 4e41f4b71Sopenharmony_ci 5e41f4b71Sopenharmony_ci**Access Level** 6e41f4b71Sopenharmony_ci 7e41f4b71Sopenharmony_ciPublic API 8e41f4b71Sopenharmony_ci 9e41f4b71Sopenharmony_ci**Reason for Change** 10e41f4b71Sopenharmony_ci 11e41f4b71Sopenharmony_ci 12e41f4b71Sopenharmony_ciIf the authorization flag is enabled in the **flags** field of **want**, it is forbidden to pass unauthorized [file URIs](../../../application-dev/reference/apis-core-file-kit/js-apis-file-fileuri.md#fileuri10) into the **URI** field of **want** or into the **wantConstant.Params.PARAMS_STREAM** field. 13e41f4b71Sopenharmony_ci 14e41f4b71Sopenharmony_ci> **NOTE** 15e41f4b71Sopenharmony_ci> 16e41f4b71Sopenharmony_ci> An authorized URI is the URI converted from the application sandbox path through [getUriFromPath](../../../application-dev/reference/apis-core-file-kit/js-apis-file-fileuri.md#fileurigeturifrompath) or a persistent file URI. 17e41f4b71Sopenharmony_ci 18e41f4b71Sopenharmony_ci**Change Impact** 19e41f4b71Sopenharmony_ci 20e41f4b71Sopenharmony_ciThis change is a non-compatible change. 21e41f4b71Sopenharmony_ci 22e41f4b71Sopenharmony_ciBefore change: 23e41f4b71Sopenharmony_ci 24e41f4b71Sopenharmony_ciDuring file sharing using **want**, if the authorization flag is enabled in the **flags** field of **want**, the URIs set in the **URI** field of **want** and the **wantConstant.Params.PARAMS_STREAM** field are always transparently transmitted. 25e41f4b71Sopenharmony_ci 26e41f4b71Sopenharmony_ciAfter change: 27e41f4b71Sopenharmony_ci 28e41f4b71Sopenharmony_ciDuring file sharing using **want**, if the authorization flag is enabled in the **flags** field of **want**, unauthorized URIs set in the **URI** field of **want** and the **wantConstant.Params.PARAMS_STREAM** field are not passed. 29e41f4b71Sopenharmony_ci 30e41f4b71Sopenharmony_ciThe file URI interception rules are as follows: 31e41f4b71Sopenharmony_ci 32e41f4b71Sopenharmony_ci1. If the **URI** field in **want** is a file URI and the authorizing party does not have the permission to use the URI, the URI field is erased. 33e41f4b71Sopenharmony_ci2. In the **WantConstant.Params.PARAMS_STREAM** field, the file URIs that the authorizing party does not have permission to access will be erased. 34e41f4b71Sopenharmony_ci3. After the URI field in **want** is combined with the file URI field in **WantConstant.Params.PARAMS_STREAM**, the part that exceeds 500 will be truncated. 35e41f4b71Sopenharmony_ci 36e41f4b71Sopenharmony_ci 37e41f4b71Sopenharmony_ci**Start API Level** 38e41f4b71Sopenharmony_ci 39e41f4b71Sopenharmony_ci9 40e41f4b71Sopenharmony_ci 41e41f4b71Sopenharmony_ci**Change Since** 42e41f4b71Sopenharmony_ci 43e41f4b71Sopenharmony_ciOpenHarmony SDK 5.0.0.41 44e41f4b71Sopenharmony_ci 45e41f4b71Sopenharmony_ci**Key API/Component Changes** 46e41f4b71Sopenharmony_ci 47e41f4b71Sopenharmony_ciN/A 48e41f4b71Sopenharmony_ci 49e41f4b71Sopenharmony_ci**Adaptation Guide** 50e41f4b71Sopenharmony_ci 51e41f4b71Sopenharmony_ciNo adaptation is required. 52