Add managed policies for Native Messaging

chrome/browser/extensions/api/messaging/message_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/messaging/message_service.h"
 
 #include "base/atomic_sequence_num.h"
 #include "base/bind.h"
 #include "base/callback.h"
 #include "base/json/json_writer.h"
@@ skipping 45 matching lines @@
 // Change even to odd and vice versa, to get the other side of a given channel.
 #define GET_OPPOSITE_PORT_ID(source_port_id) ((source_port_id) ^ 1)
 
 namespace extensions {
 
 const char kReceivingEndDoesntExistError[] =
     "Could not establish connection. Receiving end does not exist.";
 #if defined(OS_WIN) || defined(OS_MACOSX) || defined(OS_LINUX)
 const char kMissingPermissionError[] =
     "Access to native messaging requires nativeMessaging permission.";
+const char kProhibitedByPoliciesError[] =
+    "Access to then native messaging host is prohibited by system policies.";

[Joao da Silva, 2013/12/29 23:25:28]

*the

We often blame these restrictions on the system administrator :-)

Suggestion: "Access to the native messaging host was disabled by the system
administrator."

[Sergey Ulanov, 2014/01/06 23:21:55]

Done.

 #endif
 
 struct MessageService::MessageChannel {
   scoped_ptr<MessagePort> opener;
   scoped_ptr<MessagePort> receiver;
 };
 
 struct MessageService::OpenChannelParams {
   content::RenderProcessHost* source;
   base::DictionaryValue source_tab;
@@ skipping 275 matching lines @@
         extension_service->GetExtensionById(source_extension_id, false);
     has_permission = extension && extension->HasAPIPermission(
         APIPermission::kNativeMessaging);
   }
 
   if (!has_permission) {
     DispatchOnDisconnect(source, receiver_port_id, kMissingPermissionError);
     return;
   }
 
+  // Verify that the host is not blocked by policies.
+  if (!NativeMessageProcessHost::IsHostAllowed(profile->GetPrefs(),
+                                               native_app_name)) {
+    DispatchOnDisconnect(source, receiver_port_id, kProhibitedByPoliciesError);
+    return;
+  }
+
   scoped_ptr<MessageChannel> channel(new MessageChannel());
   channel->opener.reset(new ExtensionMessagePort(source, MSG_ROUTING_CONTROL,
                                                  source_extension_id));
 
   // Get handle of the native view and pass it to the native messaging host.
   gfx::NativeView native_view =
       content::RenderWidgetHost::FromID(source_process_id, source_routing_id)->
           GetView()->GetNativeView();
 
   scoped_ptr<NativeMessageProcessHost> native_process =
@@ skipping 362 matching lines @@
 }
 
 void MessageService::DispatchOnDisconnect(content::RenderProcessHost* source,
                                           int port_id,
                                           const std::string& error_message) {
   ExtensionMessagePort port(source, MSG_ROUTING_CONTROL, "");
   port.DispatchOnDisconnect(GET_OPPOSITE_PORT_ID(port_id), error_message);
 }
 
 }  // namespace extensions