Only import certificates with Web trust from ONC if the user is managed and matches the enterprise …

chrome/browser/policy/network_configuration_updater.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_NETWORK_CONFIGURATION_UPDATER_H_
 #define CHROME_BROWSER_POLICY_NETWORK_CONFIGURATION_UPDATER_H_
 
 #include <string>
 
 #include "chrome/browser/chromeos/cros/network_ui_data.h"
 #include "chrome/browser/policy/policy_service.h"
 
 namespace base {
 class Value;
 }
 
 namespace chromeos {
 class NetworkLibrary;
+class UserManager;
 }
 
 namespace policy {
 
+class BrowserPolicyConnector;
 class PolicyMap;
 
 // Keeps track of the network configuration policy settings and updates the
 // network definitions whenever the configuration changes.
 class NetworkConfigurationUpdater {
  public:
   NetworkConfigurationUpdater(PolicyService* policy_service,
-                              chromeos::NetworkLibrary* network_library);
+                              BrowserPolicyConnector* connector,
+                              chromeos::NetworkLibrary* network_library,
+                              chromeos::UserManager* user_manager);

[Mattias Nissler (ping if slow), 2012/08/28 11:57:56]

These are some heavy-weight dependencies (and indeed, we're cyclic due to
BrowserPolicyConnector). Would it be possible to just put a boolean flag into
this class that's updated appropriately when the user logs in?

[Joao da Silva, 2012/09/03 15:24:32]

Done, moved the logic to chrome_browser_main_chromeos.cc.

   virtual ~NetworkConfigurationUpdater();
 
   // Empty network configuration blob.
   static const char kEmptyConfiguration[];
 
  private:
   // Extracts ONC string from |policy_map| and pushes the configuration to
   // |network_library_| if it's different from |*cached_value| (which is
   // updated).
   void ApplyNetworkConfiguration(chromeos::NetworkUIData::ONCSource onc_source,
                                  std::string* cached_value,
                                  const base::Value* previous,
                                  const base::Value* current);
 
   // Wraps the policy service we read network configuration from.
   PolicyChangeRegistrar policy_change_registrar_;
 
+  // Used to determine the user affiliation.
+  BrowserPolicyConnector* connector_;
+
   // Network library to write network configuration to.
   chromeos::NetworkLibrary* network_library_;
 
+  // Used to determine if a user is logged in.
+  chromeos::UserManager* user_manager_;
+
   // Current settings.
   std::string device_network_config_;
   std::string user_network_config_;
 
   DISALLOW_COPY_AND_ASSIGN(NetworkConfigurationUpdater);
 };
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_NETWORK_CONFIGURATION_UPDATER_H_