Add support for kiosk mode on the client. Make sure the settings are written in the lockbox.

chrome/browser/policy/device_token_fetcher.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/device_token_fetcher.h"
 
 #include <algorithm>
 
 #include "base/bind.h"
 #include "base/metrics/histogram.h"
 #include "base/time.h"
 #include "chrome/browser/policy/cloud_policy_cache_base.h"
 #include "chrome/browser/policy/cloud_policy_constants.h"
 #include "chrome/browser/policy/cloud_policy_data_store.h"
 #include "chrome/browser/policy/delayed_work_scheduler.h"
 #include "chrome/browser/policy/device_management_service.h"
+#include "chrome/browser/policy/enterprise_install_attributes.h"
 #include "chrome/browser/policy/enterprise_metrics.h"
 #include "chrome/browser/policy/policy_notifier.h"
 #include "chrome/browser/policy/proto/device_management_local.pb.h"
 
 namespace policy {
 
 namespace {
 
 // Retry after 5 minutes (with exponential backoff) after token fetch errors.
 const int64 kTokenFetchErrorDelayMilliseconds = 5 * 60 * 1000;
@@ skipping 153 matching lines @@
 
   SampleErrorStatus(status);
 
   switch (status) {
     case DM_STATUS_SUCCESS: {
       const em::DeviceRegisterResponse& register_response =
           response.register_response();
       if (register_response.has_device_management_token()) {
         UMA_HISTOGRAM_ENUMERATION(kMetricToken, kMetricTokenFetchOK,
                                   kMetricTokenSize);
+        if (register_response.has_enrollment_type()) {
+          switch (register_response.enrollment_type()) {
+            case em::DeviceRegisterResponse::ENTERPRISE:
+              data_store_->set_device_mode(
+                  EnterpriseInstallAttributes::ENTERPRISE_DEVICE);
+              break;
+            case em::DeviceRegisterResponse::KIOSK:
+              data_store_->set_device_mode(
+                  EnterpriseInstallAttributes::KIOSK_DEVICE);
+              break;
+          }

[Mattias Nissler (ping if slow), 2012/02/16 10:36:27]

we should do the right thing when there is a value in the field that we don't
understand. Probably the safest choice would be to report an error, since we're
probably seeing a new mode that the code doesn't support.

[pastarmovj, 2012/02/17 13:59:47]

Done.

+        } else {
+          // If this field is not present we should assume we are running
+          // against old DMServer and go in enterprise enrollment mode.
+          data_store_->set_device_mode(
+              EnterpriseInstallAttributes::ENTERPRISE_DEVICE);
+        }
+
         data_store_->SetDeviceToken(register_response.device_management_token(),
                                     false);
         SetState(STATE_TOKEN_AVAILABLE);
       } else {
         NOTREACHED();
         UMA_HISTOGRAM_ENUMERATION(kMetricToken, kMetricTokenFetchBadResponse,
                                   kMetricTokenSize);
         SetState(STATE_ERROR);
       }
       return;
@@ skipping 110 matching lines @@
     case STATE_UNMANAGED:
     case STATE_ERROR:
     case STATE_TEMPORARY_ERROR:
     case STATE_BAD_AUTH:
       FetchTokenInternal();
       break;
   }
 }
 
 }  // namespace policy