Add immutable settings checks when handling policy.

chrome/browser/policy/browser_policy_connector.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/browser_policy_connector.h"
 
 #include "base/command_line.h"
 #include "base/path_service.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/policy/cloud_policy_subsystem.h"
 #include "chrome/browser/policy/configuration_policy_pref_store.h"
 #include "chrome/browser/policy/configuration_policy_provider.h"
 #include "chrome/browser/policy/dummy_configuration_policy_provider.h"
 #include "chrome/common/chrome_paths.h"
 #include "chrome/common/chrome_switches.h"
 
 #if defined(OS_WIN)
 #include "chrome/browser/policy/configuration_policy_provider_win.h"
 #elif defined(OS_MACOSX)
 #include "chrome/browser/policy/configuration_policy_provider_mac.h"
 #elif defined(OS_POSIX)
 #include "chrome/browser/policy/config_dir_policy_provider.h"
 #endif
 
 #if defined(OS_CHROMEOS)
+#include "chrome/browser/chromeos/cros/cros_library.h"
 #include "chrome/browser/policy/device_policy_cache.h"
 #include "chrome/browser/policy/device_policy_identity_strategy.h"
+#include "chrome/browser/policy/enterprise_install_attributes.h"
 #endif
 
 namespace policy {
 
 BrowserPolicyConnector::BrowserPolicyConnector()
     : ALLOW_THIS_IN_INITIALIZER_LIST(method_factory_(this)) {
   managed_platform_provider_.reset(CreateManagedPlatformProvider());
   recommended_platform_provider_.reset(CreateRecommendedPlatformProvider());
 
 #if defined(OS_CHROMEOS)
   CommandLine* command_line = CommandLine::ForCurrentProcess();
   if (command_line->HasSwitch(switches::kEnableDevicePolicy)) {
     identity_strategy_.reset(new DevicePolicyIdentityStrategy());
+    install_attributes_.reset(new EnterpriseInstallAttributes(
+        chromeos::CrosLibrary::Get()->GetCryptohomeLibrary()));
     cloud_policy_subsystem_.reset(new CloudPolicySubsystem(
         identity_strategy_.get(),
-        new DevicePolicyCache(identity_strategy_.get())));
+        new DevicePolicyCache(identity_strategy_.get(),
+                              install_attributes_.get())));
 
     // Initialize the subsystem once the message loops are spinning.
     MessageLoop::current()->PostTask(
         FROM_HERE,
         method_factory_.NewRunnableMethod(&BrowserPolicyConnector::Initialize));
   }
 #endif
 }
 
 BrowserPolicyConnector::BrowserPolicyConnector(
@@ skipping 88 matching lines @@
 
 bool BrowserPolicyConnector::IsEnterpriseManaged() {
 #if defined(OS_CHROMEOS)
   return (identity_strategy_.get() &&
           !identity_strategy_->GetDeviceToken().empty());
 #else
   return false;
 #endif
 }
 
-std::string BrowserPolicyConnector::GetEnterpriseDomain() {
-  std::string domain;
-
+EnterpriseInstallAttributes::LockResult
+    BrowserPolicyConnector::LockDevice(const std::string& user) {
 #if defined(OS_CHROMEOS)
-  // TODO(xiyuan): Find a better way to get enterprise domain.
-  std::string username;
-  std::string auth_token;
-  if (identity_strategy_.get() &&
-      identity_strategy_->GetCredentials(&username, &auth_token)) {
-    size_t pos = username.find('@');
-    if (pos != std::string::npos)
-      domain = username.substr(pos + 1);
-  }
+  if (install_attributes_.get())
+    return install_attributes_->LockDevice(user);
 #endif
 
-  return domain;
+  return EnterpriseInstallAttributes::LOCK_BACKEND_ERROR;
+}
+
+std::string BrowserPolicyConnector::GetEnterpriseDomain() {
+#if defined(OS_CHROMEOS)
+  if (install_attributes_.get())
+    return install_attributes_->GetDomain();
+#endif
+
+  return std::string();
 }
 
 void BrowserPolicyConnector::StopAutoRetry() {
   if (cloud_policy_subsystem_.get())
     cloud_policy_subsystem_->StopAutoRetry();
 }
 
 void BrowserPolicyConnector::Initialize() {
   // TODO(jkummerow, mnissler): Move this out of the browser startup path.
   if (cloud_policy_subsystem_.get()) {
     cloud_policy_subsystem_->Initialize(
         g_browser_process->local_state(),
         g_browser_process->system_request_context());
   }
 }
 
 }  // namespace