Initial Managed Mode extension API, supporting querying the setting and a stub for enabling the mod…

chrome/browser/extensions/extension_preference_api.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_preference_api.h"
 
 #include <map>
 
 #include "base/json/json_writer.h"
 #include "base/memory/singleton.h"
 #include "base/stl_util.h"
 #include "base/stringprintf.h"
 #include "base/values.h"
 #include "chrome/browser/extensions/extension_event_router.h"
 #include "chrome/browser/extensions/extension_preference_api_constants.h"
 #include "chrome/browser/extensions/extension_preference_helpers.h"
 #include "chrome/browser/extensions/extension_prefs.h"
 #include "chrome/browser/extensions/extension_prefs_scope.h"
 #include "chrome/browser/extensions/extension_proxy_api.h"
 #include "chrome/browser/extensions/extension_service.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "chrome/common/extensions/extension_error_utils.h"
 #include "chrome/common/extensions/extension_permission_set.h"
 #include "chrome/common/pref_names.h"
 #include "content/public/browser/notification_details.h"
 #include "content/public/browser/notification_source.h"
 
+namespace keys = extension_preference_api_constants;
+namespace helpers = extension_preference_helpers;
+
 namespace {
 
 struct PrefMappingEntry {
   // Name of the preference referenced by the extension API JSON.
   const char* extension_pref;
 
   // Name of the preference in the PrefStores.
   const char* browser_pref;
 
   // Permission required to access this preference.
   // Use ExtensionAPIPermission::kInvalid for |permission| to express that no
   // permission is necessary.
   ExtensionAPIPermission::ID permission;
 };
 
-const char kNotControllable[] = "not_controllable";
-const char kControlledByOtherExtensions[] = "controlled_by_other_extensions";
-const char kControllableByThisExtension[] = "controllable_by_this_extension";
-const char kControlledByThisExtension[] = "controlled_by_this_extension";
-
-const char kIncognitoSpecific[] = "incognitoSpecific";
-const char kLevelOfControl[] = "levelOfControl";
-const char kValue[] = "value";
-
 const char kOnPrefChangeFormat[] = "types.ChromeSetting.%s.onChange";
 
 PrefMappingEntry kPrefMapping[] = {
   { "alternateErrorPagesEnabled",
     prefs::kAlternateErrorPagesEnabled,
     ExtensionAPIPermission::kPrivacy
   },
   { "autofillEnabled",
     prefs::kAutofillEnabled,
     ExtensionAPIPermission::kPrivacy
   },
   { "hyperlinkAuditingEnabled",
     prefs::kEnableHyperlinkAuditing,
     ExtensionAPIPermission::kPrivacy
   },
   { "instantEnabled",
     prefs::kInstantEnabled,
     ExtensionAPIPermission::kPrivacy
   },
+  { "managedModeEnabled",
+    prefs::kInManagedMode,
+    ExtensionAPIPermission::kManagedMode
+  },
   { "networkPredictionEnabled",
     prefs::kNetworkPredictionEnabled,
     ExtensionAPIPermission::kPrivacy
   },
   { "proxy",
     prefs::kProxy,
     ExtensionAPIPermission::kProxy
   },
   { "referrersEnabled",
     prefs::kEnableReferrers,
@@ skipping 59 matching lines @@
     const std::string& browser_pref,
     bool incognito) {
   PrefService* prefs = incognito ? profile->GetOffTheRecordPrefs()
                                  : profile->GetPrefs();
   const PrefService::Preference* pref =
       prefs->FindPreference(browser_pref.c_str());
   CHECK(pref);
   ExtensionPrefs* ep = profile->GetExtensionService()->extension_prefs();
 
   if (!pref->IsExtensionModifiable())
-    return kNotControllable;
+    return keys::kNotControllable;
 
   if (ep->DoesExtensionControlPref(extension_id, browser_pref, incognito))
-    return kControlledByThisExtension;
+    return keys::kControlledByThisExtension;
 
   if (ep->CanExtensionControlPref(extension_id, browser_pref, incognito))
-    return kControllableByThisExtension;
+    return keys::kControllableByThisExtension;
 
-  return kControlledByOtherExtensions;
+  return keys::kControlledByOtherExtensions;
 }
 
 class PrefMapping {
  public:
   static PrefMapping* GetInstance() {
     return Singleton<PrefMapping>::get();
   }
 
   bool FindBrowserPrefForExtensionPref(const std::string& extension_pref,
                                        std::string* browser_pref,
@@ skipping 76 matching lines @@
   // Mapping from browser pref keys to transformers.
   std::map<std::string, PrefTransformerInterface*> transformers_;
 
   scoped_ptr<PrefTransformerInterface> identity_transformer_;
 
   DISALLOW_COPY_AND_ASSIGN(PrefMapping);
 };
 
 }  // namespace
 
-namespace keys = extension_preference_api_constants;
-namespace helpers = extension_preference_helpers;
-
 ExtensionPreferenceEventRouter::ExtensionPreferenceEventRouter(
     Profile* profile) : profile_(profile) {
   registrar_.Init(profile_->GetPrefs());
   incognito_registrar_.Init(profile_->GetOffTheRecordPrefs());
   for (size_t i = 0; i < arraysize(kPrefMapping); ++i) {
     registrar_.Add(kPrefMapping[i].browser_pref, this);
     incognito_registrar_.Add(kPrefMapping[i].browser_pref, this);
   }
 }
 
@@ skipping 25 matching lines @@
 
   ListValue args;
   DictionaryValue* dict = new DictionaryValue();
   args.Append(dict);
   const PrefService::Preference* pref =
       pref_service->FindPreference(browser_pref.c_str());
   CHECK(pref);
   ExtensionService* extension_service = profile_->GetExtensionService();
   PrefTransformerInterface* transformer =
       PrefMapping::GetInstance()->FindTransformerForBrowserPref(browser_pref);
-  dict->Set(kValue, transformer->BrowserToExtensionPref(pref->GetValue()));
+  dict->Set(keys::kValue,
+            transformer->BrowserToExtensionPref(pref->GetValue()));
   if (incognito) {
     ExtensionPrefs* ep = extension_service->extension_prefs();
-    dict->SetBoolean(kIncognitoSpecific,
+    dict->SetBoolean(keys::kIncognitoSpecific,
                      ep->HasIncognitoPrefValue(browser_pref));
   }
 
   ExtensionEventRouter* router = profile_->GetExtensionEventRouter();
   if (!router || !router->HasEventListener(event_name))
     return;
   const ExtensionSet* extensions = extension_service->extensions();
   for (ExtensionSet::const_iterator it = extensions->begin();
        it != extensions->end(); ++it) {
     std::string extension_id = (*it)->id();
     // TODO(bauerb): Only iterate over registered event listeners.
     if (router->ExtensionHasEventListener(extension_id, event_name) &&
         (*it)->HasAPIPermission(permission) &&
         (!incognito || extension_service->CanCrossIncognito(*it))) {
       std::string level_of_control =
           GetLevelOfControl(profile_, extension_id, browser_pref, incognito);
-      dict->SetString(kLevelOfControl, level_of_control);
+      dict->SetString(keys::kLevelOfControl, level_of_control);
 
       std::string json_args;
       base::JSONWriter::Write(&args, false, &json_args);
 
       DispatchEvent(extension_id, event_name, json_args);
     }
   }
 }
 
 void ExtensionPreferenceEventRouter::DispatchEvent(
     const std::string& extension_id,
     const std::string& event_name,
     const std::string& json_args) {
   profile_->GetExtensionEventRouter()->DispatchEventToExtension(
       extension_id, event_name, json_args, NULL, GURL());
 }
 
-// TODO(battre): Factor out common parts once this is stable.
+PreferenceFunction::~PreferenceFunction() { }
+
+bool PreferenceFunction::ValidateBrowserPref(
+    const std::string& extension_pref_key,
+    std::string* browser_pref_key) {
+  ExtensionAPIPermission::ID permission = ExtensionAPIPermission::kInvalid;
+  EXTENSION_FUNCTION_VALIDATE(
+      PrefMapping::GetInstance()->FindBrowserPrefForExtensionPref(
+          extension_pref_key, browser_pref_key, &permission));
+  if (!GetExtension()->HasAPIPermission(permission)) {
+    error_ = ExtensionErrorUtils::FormatErrorMessage(
+        keys::kPermissionErrorMessage, extension_pref_key);
+    return false;
+  }
+  return true;
+}
 
 GetPreferenceFunction::~GetPreferenceFunction() { }
 
 bool GetPreferenceFunction::RunImpl() {
   std::string pref_key;
   EXTENSION_FUNCTION_VALIDATE(args_->GetString(0, &pref_key));
   DictionaryValue* details = NULL;
   EXTENSION_FUNCTION_VALIDATE(args_->GetDictionary(1, &details));
 
   bool incognito = false;
   if (details->HasKey(keys::kIncognitoKey))
     EXTENSION_FUNCTION_VALIDATE(details->GetBoolean(keys::kIncognitoKey,
                                                     &incognito));
 
+  // Check incognito access.
   if (incognito && !include_incognito()) {
     error_ = keys::kIncognitoErrorMessage;
     return false;
   }
 
+  // Obtain pref.
+  std::string browser_pref;
+  if (!ValidateBrowserPref(pref_key, &browser_pref))
+    return false;
   PrefService* prefs = incognito ? profile_->GetOffTheRecordPrefs()
                                  : profile_->GetPrefs();
-  std::string browser_pref;
-  ExtensionAPIPermission::ID permission = ExtensionAPIPermission::kInvalid;
-  EXTENSION_FUNCTION_VALIDATE(
-      PrefMapping::GetInstance()->FindBrowserPrefForExtensionPref(
-          pref_key, &browser_pref, &permission));
-  if (!GetExtension()->HasAPIPermission(permission)) {
-    error_ = ExtensionErrorUtils::FormatErrorMessage(
-        keys::kPermissionErrorMessage, pref_key);
-    return false;
-  }
-
   const PrefService::Preference* pref =
       prefs->FindPreference(browser_pref.c_str());
   CHECK(pref);
+
+  scoped_ptr<DictionaryValue> result(new DictionaryValue);
+
+  // Retrieve level of control.
   std::string level_of_control =
       GetLevelOfControl(profile_, extension_id(), browser_pref, incognito);
+  result->SetString(keys::kLevelOfControl, level_of_control);
 
-  scoped_ptr<DictionaryValue> result(new DictionaryValue);
+  // Retrieve pref value.
   PrefTransformerInterface* transformer =
       PrefMapping::GetInstance()->FindTransformerForBrowserPref(browser_pref);
-  result->Set(kValue, transformer->BrowserToExtensionPref(pref->GetValue()));
-  result->SetString(kLevelOfControl, level_of_control);
+  result->Set(keys::kValue,
+              transformer->BrowserToExtensionPref(pref->GetValue()));
+
+  // Retrieve incognito status.
   if (incognito) {
     ExtensionPrefs* ep = profile_->GetExtensionService()->extension_prefs();
-    result->SetBoolean(kIncognitoSpecific,
+    result->SetBoolean(keys::kIncognitoSpecific,
                        ep->HasIncognitoPrefValue(browser_pref));
   }
+
   result_.reset(result.release());
   return true;
 }
 
 SetPreferenceFunction::~SetPreferenceFunction() { }
 
 bool SetPreferenceFunction::RunImpl() {
   std::string pref_key;
   EXTENSION_FUNCTION_VALIDATE(args_->GetString(0, &pref_key));
   DictionaryValue* details = NULL;
   EXTENSION_FUNCTION_VALIDATE(args_->GetDictionary(1, &details));
 
   Value* value = NULL;
-  EXTENSION_FUNCTION_VALIDATE(details->Get(kValue, &value));
+  EXTENSION_FUNCTION_VALIDATE(details->Get(keys::kValue, &value));
 
   ExtensionPrefsScope scope = kExtensionPrefsScopeRegular;
   if (details->HasKey(keys::kScopeKey)) {
     std::string scope_str;
     EXTENSION_FUNCTION_VALIDATE(
         details->GetString(keys::kScopeKey, &scope_str));
 
     EXTENSION_FUNCTION_VALIDATE(helpers::StringToScope(scope_str, &scope));
   }
 
+  // Check incognito scope.
   bool incognito = (scope == kExtensionPrefsScopeIncognitoPersistent ||
                     scope == kExtensionPrefsScopeIncognitoSessionOnly);
   if (incognito) {
     // Regular profiles can't access incognito unless include_incognito is true.
     if (!profile()->IsOffTheRecord() && !include_incognito()) {
       error_ = keys::kIncognitoErrorMessage;
       return false;
     }
   } else {
     // Incognito profiles can't access regular mode ever, they only exist in
     // split mode.
     if (profile()->IsOffTheRecord()) {
       error_ = "Can't modify regular settings from an incognito context.";
       return false;
     }
   }
 
   if (scope == kExtensionPrefsScopeIncognitoSessionOnly &&
       !profile_->HasOffTheRecordProfile()) {
     error_ = keys::kIncognitoSessionOnlyErrorMessage;
     return false;
   }
 
+  // Obtain pref.
   std::string browser_pref;
-  ExtensionAPIPermission::ID permission = ExtensionAPIPermission::kInvalid;
-  EXTENSION_FUNCTION_VALIDATE(
-      PrefMapping::GetInstance()->FindBrowserPrefForExtensionPref(
-          pref_key, &browser_pref, &permission));
-  if (!GetExtension()->HasAPIPermission(permission)) {
-    error_ = ExtensionErrorUtils::FormatErrorMessage(
-        keys::kPermissionErrorMessage, pref_key);
+  if (!ValidateBrowserPref(pref_key, &browser_pref))
     return false;
-  }
   ExtensionPrefs* prefs = profile_->GetExtensionService()->extension_prefs();
   const PrefService::Preference* pref =
       prefs->pref_service()->FindPreference(browser_pref.c_str());
   CHECK(pref);
+
+  // Validate new value.
   EXTENSION_FUNCTION_VALIDATE(value->GetType() == pref->GetType());
   PrefTransformerInterface* transformer =
       PrefMapping::GetInstance()->FindTransformerForBrowserPref(browser_pref);
   std::string error;
   bool bad_message = false;
   Value* browserPrefValue =
       transformer->ExtensionToBrowserPref(value, &error, &bad_message);
   if (!browserPrefValue) {
     error_ = error;
     bad_message_ = bad_message;
     return false;
   }
+
   prefs->SetExtensionControlledPref(extension_id(),
                                     browser_pref,
                                     scope,
                                     browserPrefValue);
   return true;
 }
 
 ClearPreferenceFunction::~ClearPreferenceFunction() { }
 
 bool ClearPreferenceFunction::RunImpl() {
   std::string pref_key;
   EXTENSION_FUNCTION_VALIDATE(args_->GetString(0, &pref_key));
   DictionaryValue* details = NULL;
   EXTENSION_FUNCTION_VALIDATE(args_->GetDictionary(1, &details));
 
   ExtensionPrefsScope scope = kExtensionPrefsScopeRegular;
   if (details->HasKey(keys::kScopeKey)) {
     std::string scope_str;
     EXTENSION_FUNCTION_VALIDATE(
         details->GetString(keys::kScopeKey, &scope_str));
 
     EXTENSION_FUNCTION_VALIDATE(helpers::StringToScope(scope_str, &scope));
   }
 
+  // Check incognito scope.
   bool incognito = (scope == kExtensionPrefsScopeIncognitoPersistent ||
                     scope == kExtensionPrefsScopeIncognitoSessionOnly);
   if (incognito) {
     // We don't check incognito permissions here, as an extension should be
     // always allowed to clear its own settings.
   } else {
     // Incognito profiles can't access regular mode ever, they only exist in
     // split mode.
     if (profile()->IsOffTheRecord()) {
       error_ = "Can't modify regular settings from an incognito context.";
       return false;
     }
   }
 
   std::string browser_pref;
-  ExtensionAPIPermission::ID permission = ExtensionAPIPermission::kInvalid;
-  EXTENSION_FUNCTION_VALIDATE(
-      PrefMapping::GetInstance()->FindBrowserPrefForExtensionPref(
-          pref_key, &browser_pref, &permission));
-  if (!GetExtension()->HasAPIPermission(permission)) {
-    error_ = ExtensionErrorUtils::FormatErrorMessage(
-        keys::kPermissionErrorMessage, pref_key);
+  if (!ValidateBrowserPref(pref_key, &browser_pref))
     return false;
-  }
+
   ExtensionPrefs* prefs = profile_->GetExtensionService()->extension_prefs();
   prefs->RemoveExtensionControlledPref(extension_id(), browser_pref, scope);
   return true;
 }