OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_POLICY_DEVICE_LOCAL_ACCOUNT_POLICY_SERVICE_H_ | |
6 #define CHROME_BROWSER_POLICY_DEVICE_LOCAL_ACCOUNT_POLICY_SERVICE_H_ | |
7 | |
8 #include <map> | |
9 #include <string> | |
10 | |
11 #include "base/basictypes.h" | |
12 #include "base/callback_forward.h" | |
13 #include "base/compiler_specific.h" | |
14 #include "base/memory/scoped_ptr.h" | |
15 #include "base/observer_list.h" | |
16 #include "chrome/browser/chromeos/settings/device_settings_service.h" | |
17 #include "chrome/browser/policy/cloud_policy_core.h" | |
18 #include "chrome/browser/policy/cloud_policy_store.h" | |
19 | |
20 namespace chromeos { | |
21 class SessionManagerClient; | |
22 } | |
23 | |
24 namespace policy { | |
25 | |
26 class CloudPolicyClient; | |
27 class DeviceLocalAccountPolicyStore; | |
28 class DeviceManagementService; | |
29 | |
30 // The main switching central that downloads, caches, refreshes, etc. policy for | |
31 // a single device-local account. | |
32 class DeviceLocalAccountPolicyBroker { | |
33 public: | |
34 explicit DeviceLocalAccountPolicyBroker( | |
35 scoped_ptr<DeviceLocalAccountPolicyStore> store); | |
36 ~DeviceLocalAccountPolicyBroker(); | |
37 | |
38 const std::string& account_id() const; | |
39 | |
40 CloudPolicyCore* core() { return &core_; } | |
41 const CloudPolicyCore* core() const { return &core_; } | |
42 | |
43 // Establish a cloud connection for the service. | |
44 void Connect(scoped_ptr<CloudPolicyClient> client); | |
45 | |
46 // Destroy the cloud connection, stopping policy refreshes. | |
47 void Disconnect(); | |
48 | |
49 // Reads the refresh delay from policy and configures the refresh scheduler. | |
50 void UpdateRefreshDelay(); | |
51 | |
52 // Retrieves the display name for the account as stored in policy. Returns an | |
53 // empty string if the policy is not present. | |
54 std::string GetDisplayName() const; | |
55 | |
56 private: | |
57 const std::string account_id_; | |
58 scoped_ptr<DeviceLocalAccountPolicyStore> store_; | |
59 CloudPolicyCore core_; | |
60 | |
61 DISALLOW_COPY_AND_ASSIGN(DeviceLocalAccountPolicyBroker); | |
62 }; | |
63 | |
64 // Manages user policy blobs for device-local accounts present on the device. | |
65 // The actual policy blobs are brokered by session_manager (to prevent file | |
66 // manipulation), and we're making signature checks on the policy blobs to | |
67 // ensure they're issued by the device owner. | |
68 class DeviceLocalAccountPolicyService | |
69 : public chromeos::DeviceSettingsService::Observer, | |
70 public CloudPolicyStore::Observer { | |
71 public: | |
72 // Interface for interested parties to observe policy changes. | |
73 class Observer { | |
74 public: | |
75 virtual ~Observer() {} | |
76 | |
77 // Policy for the given account has changed. | |
78 virtual void OnPolicyUpdated(const std::string& account_id) = 0; | |
79 | |
80 // The list of accounts has been updated. | |
81 virtual void OnDeviceLocalAccountsChanged() = 0; | |
82 }; | |
83 | |
84 DeviceLocalAccountPolicyService( | |
85 chromeos::SessionManagerClient* session_manager_client, | |
86 chromeos::DeviceSettingsService* device_settings_service); | |
87 virtual ~DeviceLocalAccountPolicyService(); | |
88 | |
89 // Initializes the cloud policy service connection. | |
90 void Connect(DeviceManagementService* device_management_service); | |
91 | |
92 // Prevents further policy fetches from the cloud. | |
93 void Disconnect(); | |
94 | |
95 // Get the policy broker for a given account. Returns NULL if that account is | |
96 // not valid. | |
97 DeviceLocalAccountPolicyBroker* GetBrokerForAccount( | |
98 const std::string& account_id); | |
99 | |
100 // Indicates whether policy has been successfully fetched for the given | |
101 // account. | |
102 bool IsPolicyAvailableForAccount(const std::string& account_id); | |
103 | |
104 void AddObserver(Observer* observer); | |
105 void RemoveObserver(Observer* observer); | |
106 | |
107 // DeviceSettingsService::Observer: | |
108 virtual void OwnershipStatusChanged() OVERRIDE; | |
109 virtual void DeviceSettingsUpdated() OVERRIDE; | |
110 | |
111 // CloudPolicyStore::Observer: | |
112 virtual void OnStoreLoaded(CloudPolicyStore* store) OVERRIDE; | |
113 virtual void OnStoreError(CloudPolicyStore* store) OVERRIDE; | |
114 | |
115 private: | |
116 typedef std::map<std::string, DeviceLocalAccountPolicyBroker*> | |
117 PolicyBrokerMap; | |
118 | |
119 // Re-queries the list of defined device-local accounts from device settings | |
120 // and updates |policy_brokers_| to match that list. | |
121 void UpdateAccountList( | |
122 const enterprise_management::ChromeDeviceSettingsProto& device_settings); | |
123 | |
124 // Creates a broker for the given account ID. | |
125 scoped_ptr<DeviceLocalAccountPolicyBroker> CreateBroker( | |
126 const std::string& account_id); | |
127 | |
128 // Deletes brokers in |map| and clears it. | |
129 void DeleteBrokers(PolicyBrokerMap* map); | |
130 | |
131 // Find the broker for a given |store|. Returns NULL if |store| is unknown. | |
132 DeviceLocalAccountPolicyBroker* GetBrokerForStore(CloudPolicyStore* store); | |
133 | |
134 // Creates and initializes a cloud policy client for |account_id|. Returns | |
135 // NULL if the device doesn't have credentials in device settings (i.e. is not | |
136 // enterprise-enrolled). | |
137 scoped_ptr<CloudPolicyClient> CreateClientForAccount( | |
138 const std::string& account_id); | |
139 | |
140 chromeos::SessionManagerClient* session_manager_client_; | |
141 chromeos::DeviceSettingsService* device_settings_service_; | |
142 | |
143 DeviceManagementService* device_management_service_; | |
144 | |
145 // The device-local account policy brokers, keyed by account ID. | |
146 PolicyBrokerMap policy_brokers_; | |
147 | |
148 ObserverList<Observer, true> observers_; | |
149 | |
150 DISALLOW_COPY_AND_ASSIGN(DeviceLocalAccountPolicyService); | |
151 }; | |
152 | |
153 } // namespace policy | |
154 | |
155 #endif // CHROME_BROWSER_POLICY_DEVICE_LOCAL_ACCOUNT_POLICY_SERVICE_H_ | |
OLD | NEW |