Only import certificates with Web trust from ONC if the user is managed and matches the enterprise …

chrome/browser/chromeos/cros/onc_network_parser.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_CHROMEOS_CROS_ONC_NETWORK_PARSER_H_
 #define CHROME_BROWSER_CHROMEOS_CROS_ONC_NETWORK_PARSER_H_
 
 #include <string>
 
 #include "base/compiler_specific.h"  // for OVERRIDE
@@ skipping 42 matching lines @@
                                 PropertyIndex,
                                 const base::Value&,
                                 Network*);
 
   OncNetworkParser(const std::string& onc_blob,
                    const std::string& passphrase,
                    NetworkUIData::ONCSource onc_source);
   virtual ~OncNetworkParser();
   static const EnumMapper<PropertyIndex>* property_mapper();
 
+  // Certificates pushed from a policy source with Web trust are only imported
+  // with ParseCertificate() if this permission is granted.
+  void AllowWebTrustFromPolicy();
+
   // Returns the number of networks in the "NetworkConfigs" list.
   int GetNetworkConfigsSize() const;
 
   // Returns the network configuration dictionary for the nth network. CHECKs if
   // |n| is out of range and returns NULL on parse errors.
   const base::DictionaryValue* GetNetworkConfig(int n);
 
   // Call to create the network by parsing network config in the nth position.
   // (0-based). CHECKs if |n| is out of range and returns NULL on parse errors.
   // |removed| is set to true if the network should be removed.  |removed| may
@@ skipping 146 matching lines @@
                                         PropertyIndex index,
                                         const base::Value& value,
                                         Network* network);
 
   // Error message from the JSON parser, if applicable.
   std::string parse_error_;
 
   // Where the ONC blob comes from.
   NetworkUIData::ONCSource onc_source_;
 
+  // Whether certificates with Web trust should be stored when pushed from a
+  // policy source.
+  bool allow_web_trust_from_policy_;
+
   scoped_ptr<base::DictionaryValue> root_dict_;
   base::ListValue* network_configs_;
   base::ListValue* certificates_;
 
   DISALLOW_COPY_AND_ASSIGN(OncNetworkParser);
 };
 
 // Class for parsing Ethernet networks.
 class OncEthernetNetworkParser : public OncNetworkParser {
  public:
@@ skipping 82 matching lines @@
                                 const base::Value& value,
                                 Network* network);
 
  private:
   DISALLOW_COPY_AND_ASSIGN(OncVirtualNetworkParser);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROME_BROWSER_CHROMEOS_CROS_ONC_NETWORK_PARSER_H_