Add a lock to the managed user settings page and require authentication for unlocking.

chrome/browser/ui/webui/options/managed_user_passphrase_handler.h

Index: chrome/browser/ui/webui/options/managed_user_passphrase_handler.h
diff --git a/chrome/browser/ui/webui/options/managed_user_passphrase_handler.h b/chrome/browser/ui/webui/options/managed_user_passphrase_handler.h
index 9c1a0769195c1ba202960ee06abb8763f588ee80..bcd34275346a7470fc2ba8b41d9b423a5416ffe0 100644
--- a/chrome/browser/ui/webui/options/managed_user_passphrase_handler.h
+++ b/chrome/browser/ui/webui/options/managed_user_passphrase_handler.h
@@ -33,6 +33,32 @@ class ManagedUserPassphraseHandler : public OptionsPageUIHandler {
   // the UI.
   void SetLocalPassphrase(const base::ListValue* args);
 
+  // This function displays the passphrase dialog where the manager of the

[Pam (message me for reviews), 2013/02/15 09:31:18]

Nit: For brevity, I would remove all the "This function" pieces, and just start
with (e.g.) "Displays the passphrase...". Also from SetLocalPassphrase, in that
case.

[Adrian Kuegel, 2013/02/15 09:56:02]

Done.

+  // managed account can enter the passphrase which allows him to modify the
+  // settings. It expects as parameter the name of the Javascript function
+  // which should be called after the passphrase has been checked.
+  void DisplayPassphraseDialog(const base::ListValue* args);
+
+  // This function will be called after the user either clicked Cancel or
+  // successfully entered the passphrase and clicked Unlock in the Passphrase
+  // Dialog.
+  void PassphraseDialogCallback(bool success);
+
+  // This function resets the authentication state of the manager of the
+  // managed account.
+  void EndAuthentication(const base::ListValue* args);
+
+  // This function checks if there is already a passphrase specified. It
+  // expects as parameter the name of the Javascript function which should be
+  // called with the results of this check.
+  void IsPassphraseSet(const base::ListValue* args);
+
+  // This function resets the passphrase to the empty string.
+  void ResetPassphrase(const base::ListValue* args);
+
+  // This variable is used to save the name of the Javascript function
+  // which should be called after the passphrase has been checked.
+  std::string callback_function_name_;
   base::WeakPtrFactory<ManagedUserPassphraseHandler> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(ManagedUserPassphraseHandler);