UserPolicyCache only becomes ready after policy has been fetched.

chrome/browser/policy/browser_policy_connector.h

Index: chrome/browser/policy/browser_policy_connector.h
diff --git a/chrome/browser/policy/browser_policy_connector.h b/chrome/browser/policy/browser_policy_connector.h
index da746b58ef0766056e04366abdba1f341010d0f8..c59454af90c73b1022ff66abfc2d05d8f1d06647 100644
--- a/chrome/browser/policy/browser_policy_connector.h
+++ b/chrome/browser/policy/browser_policy_connector.h
@@ -98,13 +98,17 @@ class BrowserPolicyConnector : public content::NotificationObserver {
   void ScheduleServiceInitialization(int64 delay_milliseconds);
 
   // Initializes the user cloud policy infrastructure.
-  void InitializeUserPolicy(const std::string& user_name);
+  // Returns true if initialization of the user cloud policy will block Profile
+  // creation until a user policy fetch is performed.

[Mattias Nissler (ping if slow), 2011/11/11 11:41:23]

This return value is easy to miss and the results may be quite fatal ;) I'd
rather see a GetUserAffiliation() call from LoginUtils, make the decision there
and then call a to-be-created SetWaitForUserPolicy().

[Joao da Silva, 2011/11/11 12:55:14]

Done, in a slightly different form. The decision is made in LoginUtils, but is
passed into this function as a parameter. This is required when the
UserPolicyCache is created.

+  bool InitializeUserPolicy(const std::string& user_name);
 
   // Installs a token service for user policy.
   void SetUserPolicyTokenService(TokenService* token_service);
 
   // Registers for user policy (if not already registered), using the passed
-  // OAuth V2 token for authentication.
+  // OAuth V2 token for authentication. |oauth_token| can be empty to signal
+  // that an attempt to fetch the token was made but failed, or that oauth
+  // isn't being used.
   void RegisterForUserPolicy(const std::string& oauth_token);
 
   const CloudPolicyDataStore* GetDeviceCloudPolicyDataStore() const;