Fix allowing content provider for isolated processes

Notes:
- there maybe be more category to be allow
- untested if an isolated process can access a content provider if allowed