Only import certificates with Web trust from ONC if the user is managed and matches the enterprise …

chrome/browser/policy/browser_policy_connector.h

Index: chrome/browser/policy/browser_policy_connector.h
diff --git a/chrome/browser/policy/browser_policy_connector.h b/chrome/browser/policy/browser_policy_connector.h
index fc38904eb34fcafa7602f30ec3a39a7a18907c62..17b34505abd361b1f748aaa6f85df1f6ec9854f3 100644
--- a/chrome/browser/policy/browser_policy_connector.h
+++ b/chrome/browser/policy/browser_policy_connector.h
@@ -28,6 +28,7 @@ class CloudPolicyProvider;
 class CloudPolicySubsystem;
 class ConfigurationPolicyProvider;
 class DeviceManagementService;
+class NetworkConfigurationUpdater;
 class PolicyService;
 class UserCloudPolicyManager;
 class UserPolicyTokenCache;
@@ -145,6 +146,8 @@ class BrowserPolicyConnector : public content::NotificationObserver {
 
   AppPackUpdater* GetAppPackUpdater();
 
+  NetworkConfigurationUpdater* GetNetworkConfigurationUpdater();
+
   DeviceManagementService* device_management_service() {
     return device_management_service_.get();
   }
@@ -220,6 +223,7 @@ class BrowserPolicyConnector : public content::NotificationObserver {
 
 #if defined(OS_CHROMEOS)
   scoped_ptr<AppPackUpdater> app_pack_updater_;
+  scoped_ptr<NetworkConfigurationUpdater> network_configuration_updater_;

[Mattias Nissler (ping if slow), 2012/09/05 11:19:05]

As discussed offline, we probably want to separate out the policy enforcement
bits to a new kitchen sink class in an effort to keep responsibilities clear.
Let's do that in a separate effort though.

 #endif
 
   DISALLOW_COPY_AND_ASSIGN(BrowserPolicyConnector);