OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_POLICY_USER_CLOUD_POLICY_STORE_CHROMEOS_H_ | |
6 #define CHROME_BROWSER_POLICY_USER_CLOUD_POLICY_STORE_CHROMEOS_H_ | |
7 | |
8 #include <string> | |
9 #include <vector> | |
10 | |
11 #include "base/basictypes.h" | |
12 #include "base/compiler_specific.h" | |
13 #include "base/files/file_path.h" | |
14 #include "base/memory/scoped_ptr.h" | |
15 #include "base/memory/weak_ptr.h" | |
16 #include "chrome/browser/policy/cloud_policy_validator.h" | |
17 #include "chrome/browser/policy/user_cloud_policy_store_base.h" | |
18 #include "chromeos/dbus/dbus_method_call_status.h" | |
19 | |
20 namespace chromeos { | |
21 class CryptohomeClient; | |
22 class SessionManagerClient; | |
23 } | |
24 | |
25 namespace policy { | |
26 | |
27 class LegacyPolicyCacheLoader; | |
28 | |
29 // Implements a cloud policy store backed by the Chrome OS' session_manager, | |
30 // which takes care of persisting policy to disk and is accessed via DBus calls | |
31 // through SessionManagerClient. | |
32 // | |
33 // Additionally, this class drives legacy UserPolicyTokenCache and | |
34 // UserPolicyDiskCache instances, migrating policy from these to session_manager | |
35 // storage on the fly. | |
36 class UserCloudPolicyStoreChromeOS : public UserCloudPolicyStoreBase { | |
37 public: | |
38 UserCloudPolicyStoreChromeOS( | |
39 chromeos::CryptohomeClient* cryptohome_client, | |
40 chromeos::SessionManagerClient* session_manager_client, | |
41 const std::string& username, | |
42 const base::FilePath& user_policy_key_dir, | |
43 const base::FilePath& legacy_token_cache_file, | |
44 const base::FilePath& legacy_policy_cache_file); | |
45 virtual ~UserCloudPolicyStoreChromeOS(); | |
46 | |
47 // CloudPolicyStore: | |
48 virtual void Store( | |
49 const enterprise_management::PolicyFetchResponse& policy) OVERRIDE; | |
50 virtual void Load() OVERRIDE; | |
51 | |
52 private: | |
53 // Starts validation of |policy| before storing it. | |
54 void ValidatePolicyForStore( | |
55 scoped_ptr<enterprise_management::PolicyFetchResponse> policy); | |
56 | |
57 // Completion handler for policy validation on the Store() path. | |
58 // Starts a store operation if the validation succeeded. | |
59 void OnPolicyToStoreValidated(UserCloudPolicyValidator* validator); | |
60 | |
61 // Called back from SessionManagerClient for policy store operations. | |
62 void OnPolicyStored(bool); | |
63 | |
64 // Called back from SessionManagerClient for policy load operations. | |
65 void OnPolicyRetrieved(const std::string& policy_blob); | |
66 | |
67 // Starts validation of the loaded |policy| before installing it. | |
68 void ValidateRetrievedPolicy( | |
69 scoped_ptr<enterprise_management::PolicyFetchResponse> policy); | |
70 | |
71 // Completion handler for policy validation on the Load() path. Installs the | |
72 // policy and publishes it if validation succeeded. | |
73 void OnRetrievedPolicyValidated(UserCloudPolicyValidator* validator); | |
74 | |
75 // Callback for loading legacy caches. | |
76 void OnLegacyLoadFinished( | |
77 const std::string& dm_token, | |
78 const std::string& device_id, | |
79 Status status, | |
80 scoped_ptr<enterprise_management::PolicyFetchResponse>); | |
81 | |
82 // Completion callback for legacy policy validation. | |
83 void OnLegacyPolicyValidated(const std::string& dm_token, | |
84 const std::string& device_id, | |
85 UserCloudPolicyValidator* validator); | |
86 | |
87 // Installs legacy tokens. | |
88 void InstallLegacyTokens(const std::string& dm_token, | |
89 const std::string& device_id); | |
90 | |
91 // Removes the passed-in legacy cache directory. | |
92 static void RemoveLegacyCacheDir(const base::FilePath& dir); | |
93 | |
94 // Invokes |callback| after reloading |policy_key_|. | |
95 void ReloadPolicyKey(const base::Closure& callback); | |
96 | |
97 // Reads the contents of |path| into |key|. | |
98 static void LoadPolicyKey(const base::FilePath& path, | |
99 std::vector<uint8>* key); | |
100 | |
101 // Callback for the key reloading. | |
102 void OnPolicyKeyReloaded(std::vector<uint8>* key, | |
103 const base::Closure& callback); | |
104 | |
105 // Invokes |callback| after creating |policy_key_|, if it hasn't been created | |
106 // yet; otherwise invokes |callback| immediately. | |
107 void EnsurePolicyKeyLoaded(const base::Closure& callback); | |
108 | |
109 // Callback for getting the sanitized username from |cryptohome_client_|. | |
110 void OnGetSanitizedUsername(const base::Closure& callback, | |
111 chromeos::DBusMethodCallStatus call_status, | |
112 const std::string& sanitized_username); | |
113 | |
114 chromeos::CryptohomeClient* cryptohome_client_; | |
115 chromeos::SessionManagerClient* session_manager_client_; | |
116 const std::string username_; | |
117 base::FilePath user_policy_key_dir_; | |
118 | |
119 base::WeakPtrFactory<UserCloudPolicyStoreChromeOS> weak_factory_; | |
120 | |
121 // TODO(mnissler): Remove all the legacy policy support members below after | |
122 // the number of pre-M20 clients drops back to zero. | |
123 base::FilePath legacy_cache_dir_; | |
124 scoped_ptr<LegacyPolicyCacheLoader> legacy_loader_; | |
125 bool legacy_caches_loaded_; | |
126 | |
127 bool policy_key_loaded_; | |
128 base::FilePath policy_key_path_; | |
129 std::vector<uint8> policy_key_; | |
130 | |
131 DISALLOW_COPY_AND_ASSIGN(UserCloudPolicyStoreChromeOS); | |
132 }; | |
133 | |
134 } // namespace policy | |
135 | |
136 #endif // CHROME_BROWSER_POLICY_USER_CLOUD_POLICY_STORE_CHROMEOS_H_ | |
OLD | NEW |