Add a SigninAllowed policy.

chrome/browser/signin/signin_ui_util.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/signin/signin_ui_util.h"
 
 #include "base/sys_string_conversions.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/signin/signin_global_error.h"
@@ skipping 20 matching lines @@
   // Auth errors have the highest priority - after that, individual service
   // errors.
   SigninManager* signin_manager = SigninManagerFactory::GetForProfile(profile);
   SigninGlobalError* signin_error = signin_manager->signin_global_error();
   if (signin_error && signin_error->HasBadge())
     return signin_error;
 
   // No auth error - now try other services. Currently the list is just hard-
   // coded but in the future if we add more we can create some kind of
   // registration framework.
-  if (profile->IsSyncAccessible()) {
+  if (profile->IsSyncAccessible() && profile->IsSigninAllowed()) {

[Andrew T Wilson (Slow), 2013/02/04 15:41:48]

Don't check IsSigninAllowed() here.

[Adrian Kuegel, 2013/02/05 10:55:15]

Done.

     ProfileSyncService* service =
         ProfileSyncServiceFactory::GetForProfile(profile);
     SyncGlobalError* error = service->sync_global_error();
     if (error && error->HasBadge())
       return error;
   }
   return NULL;
 }
 
 string16 GetSigninMenuLabel(Profile* profile) {
   GlobalError* error = signin_ui_util::GetSignedInServiceError(profile);
   if (error)
     return error->MenuItemLabel();
 
   // No errors, so just display the signed in user, if any.
-  ProfileSyncService* service = profile->IsSyncAccessible() ?
-      ProfileSyncServiceFactory::GetForProfile(profile) : NULL;
+  ProfileSyncService* service =
+      profile->IsSyncAccessible() && profile->IsSigninAllowed() ?

[Andrew T Wilson (Slow), 2013/02/04 15:41:48]

Don't check IsSigninAllowed() here.

[Adrian Kuegel, 2013/02/05 10:55:15]

Done.

+          ProfileSyncServiceFactory::GetForProfile(profile) : NULL;
 
   // Even if the user is signed in, don't display the "signed in as..."
   // label if we're still setting up sync.
   if (!service || !service->FirstSetupInProgress()) {
     std::string username;
     SigninManager* signin_manager =
         SigninManagerFactory::GetForProfileIfExists(profile);
     if (signin_manager)
       username = signin_manager->GetAuthenticatedUsername();
     if (!username.empty() && !signin_manager->AuthInProgress()) {
@@ skipping 58 matching lines @@
       if (status_label) {
         status_label->assign(l10n_util::GetStringUTF16(
             IDS_SYNC_ERROR_SIGNING_IN));
       }
       break;
   }
 }
 
 
 }  // namespace signin_ui_util