fixed the DCHECK and also corrected the website setting UI for media

chrome/browser/ui/cocoa/website_settings_bubble_controller.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "chrome/browser/ui/cocoa/website_settings_bubble_controller.h"
 
 #include <cmath>
 
 #import <AppKit/AppKit.h>
 
@@ skipping 854 matching lines @@
   [button setFont:[NSFont systemFontOfSize:[NSFont smallSystemFontSize]]];
   [button setBordered:NO];
   [[button cell] setControlSize:NSSmallControlSize];
   [button setTag:permissionInfo.type];
   [button setAction:@selector(permissionValueChanged:)];
   [button setTarget:self];
 
   // Create the popup menu.
   // TODO(dubroy): Refactor this code to use PermissionMenuModel.
 
-  // Media stream permission does not support "Always allow".
-  // TODO(xians): Media supports "allow" for https but not for http.
-  if (permissionInfo.type != CONTENT_SETTINGS_TYPE_MEDIASTREAM) {
+  // Media stream permission only support "Always allow" for https.
+  if (permissionInfo.type != CONTENT_SETTINGS_TYPE_MEDIASTREAM ||
+      (webContents_ && webContents_->GetURL().SchemeIsSecure())) {
     [button addItemWithTitle:
         l10n_util::GetNSString(IDS_WEBSITE_SETTINGS_MENU_ITEM_ALLOW)];
     [[button lastItem] setTag:CONTENT_SETTING_ALLOW];
   }
 
   // Fullscreen does not support "Always block".
   if (permissionInfo.type != CONTENT_SETTINGS_TYPE_FULLSCREEN) {
     [button addItemWithTitle:
         l10n_util::GetNSString(IDS_WEBSITE_SETTINGS_MENU_ITEM_BLOCK)];
     [[button lastItem] setTag:CONTENT_SETTING_BLOCK];
@@ skipping 344 matching lines @@
   [bubble_controller_ setPermissionInfo:permission_info_list];
 }
 
 void WebsiteSettingsUIBridge::SetFirstVisit(const string16& first_visit) {
   [bubble_controller_ setFirstVisit:first_visit];
 }
 
 void WebsiteSettingsUIBridge::SetSelectedTab(TabId tab_id) {
   [bubble_controller_ setSelectedTab:tab_id];
 }