Add a lock to the managed user settings page and require authentication for unlocking.

chrome/common/pref_names.cc

Index: chrome/common/pref_names.cc
diff --git a/chrome/common/pref_names.cc b/chrome/common/pref_names.cc
index 42824c7c9e45112fdb6d67eec15b21f6697bb115..2181707baf2efe2fbb91f07e66fe74311f257874 100644
--- a/chrome/common/pref_names.cc
+++ b/chrome/common/pref_names.cc
@@ -35,6 +35,13 @@ const char kManagedModeWhitelist[] = "profile.managed.whitelist";
 // List of pages that are manually blocked.
 const char kManagedModeBlacklist[] = "profile.managed.blacklist";
 
+// This preference is used to store the hash of a password of the custodian of
+// a managed user. It allows to unlock options which should be not available to
+// the managed user. The salt preference is used to derive the hash from the
+// password.
+const char kManagedModeLocalPassphrase[] = "managed_mode.passphrase";
+const char kManagedModeLocalSalt[] = "managed_mode.salt";
+
 // Used to determine if the last session exited cleanly. Set to false when
 // first opened, and to true when closing. On startup if the value is false,
 // it means the profile didn't exit cleanly.