Only import certificates with Web trust from ONC if the user is managed and matches the enterprise …

chrome/browser/policy/browser_policy_connector.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 #define CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 10 matching lines @@
 class TokenService;
 
 namespace policy {
 
 class AppPackUpdater;
 class CloudPolicyDataStore;
 class CloudPolicyProvider;
 class CloudPolicySubsystem;
 class ConfigurationPolicyProvider;
 class DeviceManagementService;
+class NetworkConfigurationUpdater;
 class PolicyService;
 class UserCloudPolicyManager;
 class UserPolicyTokenCache;
 
 // Manages the lifecycle of browser-global policy infrastructure, such as the
 // platform policy providers, device- and the user-cloud policy infrastructure.
 // TODO(gfeher,mnissler): Factor out device and user specific methods into their
 // respective classes.
 class BrowserPolicyConnector : public content::NotificationObserver {
  public:
@@ skipping 97 matching lines @@
   CloudPolicyDataStore* GetUserCloudPolicyDataStore();
 
   const ConfigurationPolicyHandlerList* GetHandlerList() const;
 
   // Works out the user affiliation by checking the given |user_name| against
   // the installation attributes.
   UserAffiliation GetUserAffiliation(const std::string& user_name);
 
   AppPackUpdater* GetAppPackUpdater();
 
+  NetworkConfigurationUpdater* GetNetworkConfigurationUpdater();
+
   DeviceManagementService* device_management_service() {
     return device_management_service_.get();
   }
 
   // Sets a |provider| that will be included in PolicyServices returned by
   // CreatePolicyService. This is a static method because local state is
   // created immediately after the connector, and tests don't have a chance to
   // inject the provider otherwise. |provider| must outlive the connector, and
   // its ownership is not taken.
   static void SetPolicyProviderForTesting(
@@ skipping 55 matching lines @@
 
   // Registers the provider for notification of successful Gaia logins.
   content::NotificationRegistrar registrar_;
 
   // Weak reference to the TokenService we are listening to for user cloud
   // policy authentication tokens.
   TokenService* token_service_;
 
 #if defined(OS_CHROMEOS)
   scoped_ptr<AppPackUpdater> app_pack_updater_;
+  scoped_ptr<NetworkConfigurationUpdater> network_configuration_updater_;

[Mattias Nissler (ping if slow), 2012/09/05 11:19:05]

As discussed offline, we probably want to separate out the policy enforcement
bits to a new kitchen sink class in an effort to keep responsibilities clear.
Let's do that in a separate effort though.

 #endif
 
   DISALLOW_COPY_AND_ASSIGN(BrowserPolicyConnector);
 };
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_BROWSER_POLICY_CONNECTOR_H_