Add a lock to the managed user settings page and require authentication for unlocking.

chrome/common/pref_names.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/pref_names.h"
 
 #include "base/basictypes.h"
 
 namespace prefs {
 
@@ skipping 20 matching lines @@
 const char kHomePageChanged[] = "homepage_changed";
 
 // Does this user have a Google+ Profile?
 const char kIsGooglePlusUser[] = "is_google_plus_user";
 
 // List of pages that are manually approved.
 const char kManagedModeWhitelist[] = "profile.managed.whitelist";
 // List of pages that are manually blocked.
 const char kManagedModeBlacklist[] = "profile.managed.blacklist";
 
+// This preference is used to store the hash of a password of the custodian of
+// a managed user. It allows to unlock options which should be not available to

[Pam (message me for reviews), 2013/01/28 13:53:27]

This use of "unlock" makes it sound like it's the opposite of the "locked" pref
below.

[Adrian Kuegel, 2013/01/28 15:41:44]

As I removed the "locked" pref, I guess it is now ok.

+// the managed user. The salt preference is used to derive the hash from the
+// password.
+const char kManagedModeLocalPassphrase[] = "managed_mode.passphrase";
+const char kManagedModeLocalSalt[] = "managed_mode.salt";
+const char kManagedModeLocked[] = "managed_mode.locked";
+
 // Used to determine if the last session exited cleanly. Set to false when
 // first opened, and to true when closing. On startup if the value is false,
 // it means the profile didn't exit cleanly.
 // DEPRECATED: this is replaced by kSessionExitType and exists for backwards
 // compatability.
 const char kSessionExitedCleanly[] = "profile.exited_cleanly";
 
 // A string pref whose values is one of the values defined by
 // |ProfileImpl::kPrefExitTypeXXX|. Set to |kPrefExitTypeCrashed| on startup and
 // one of |kPrefExitTypeNormal| or |kPrefExitTypeSessionEnded| during
@@ skipping 2183 matching lines @@
 const char kLastPolicyStatisticsUpdate[] = "policy.last_statistics_update";
 
 #if defined(OS_CHROMEOS)
 // The RLZ brand code, if enabled.
 const char kRLZBrand[] = "rlz.brand";
 // Whether RLZ pings are disabled.
 const char kRLZDisabled[] = "rlz.disabled";
 #endif
 
 }  // namespace prefs