Add a lock to the managed user settings page and require authentication for unlocking.

chrome/browser/ui/webui/options/managed_user_passphrase_handler.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_UI_WEBUI_OPTIONS_MANAGED_USER_PASSPHRASE_HANDLER_H_
 #define CHROME_BROWSER_UI_WEBUI_OPTIONS_MANAGED_USER_PASSPHRASE_HANDLER_H_
 
 #include <string>
 
 #include "base/memory/weak_ptr.h"
@@ skipping 10 matching lines @@
   ManagedUserPassphraseHandler();
   virtual ~ManagedUserPassphraseHandler();
 
   // OptionsPageUIHandler implementation.
   virtual void InitializeHandler() OVERRIDE;
   virtual void RegisterMessages() OVERRIDE;
   virtual void GetLocalizedValues(
       base::DictionaryValue* localized_strings) OVERRIDE;
 
  private:
-  // This function is used to set the passphrase of the manager of the managed
-  // account. The passphrase is expected as the parameter and is passed in from
-  // the UI.
+  // Used to set the passphrase of the manager of the managed account. The

[James Hawkins, 2013/02/20 17:24:56]

nit: // Sets the passphrase...

[Adrian Kuegel, 2013/02/20 18:05:02]

Done.

+  // passphrase is expected as the parameter and is passed in from the UI.
   void SetLocalPassphrase(const base::ListValue* args);
 
+  // Displays the passphrase dialog where the manager of the managed account
+  // can enter the passphrase which allows him to modify the settings. It
+  // expects as parameter the name of the Javascript function which should be
+  // called after the passphrase has been checked.
+  void DisplayPassphraseDialog(const base::ListValue* args);
+
+  // Will be called after the user either clicked Cancel or successfully entered

[James Hawkins, 2013/02/20 17:24:56]

nit: Document what it does, not when it's called.

[Adrian Kuegel, 2013/02/20 18:05:02]

Done.

+  // the passphrase and clicked Unlock in the Passphrase Dialog.
+  void PassphraseDialogCallback(bool success);
+
+  // Resets the authentication state of the manager of the managed account.
+  void EndAuthentication(const base::ListValue* args);
+
+  // Checks if there is already a passphrase specified. It expects as parameter
+  // the name of the Javascript function which should be called with the results
+  // of this check.
+  void IsPassphraseSet(const base::ListValue* args);
+
+  // Resets the passphrase to the empty string.
+  void ResetPassphrase(const base::ListValue* args);
+
+  // Used to save the name of the Javascript function which should be called

[James Hawkins, 2013/02/20 17:24:56]

nit: // The name of the...

[Adrian Kuegel, 2013/02/20 18:05:02]

Done.

+  // after the passphrase has been checked.
+  std::string callback_function_name_;
   base::WeakPtrFactory<ManagedUserPassphraseHandler> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(ManagedUserPassphraseHandler);
 };
 
 }  // namespace options
 
 #endif  // CHROME_BROWSER_UI_WEBUI_OPTIONS_MANAGED_USER_PASSPHRASE_HANDLER_H_