Disable normal default extensions in case of managed users

chrome/browser/managed_mode/managed_user_service.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/managed_mode/managed_user_service.h"
 
 #include "base/memory/ref_counted.h"
 #include "base/prefs/pref_service.h"
 #include "base/sequenced_task_runner.h"
 #include "chrome/browser/extensions/extension_service.h"
@@ skipping 150 matching lines @@
   // If the extension is already loaded, we allow it, otherwise we'd unload
   // all existing extensions.
   ExtensionService* extension_service =
       extensions::ExtensionSystem::Get(profile_)->extension_service();
 
   // |extension_service| can be NULL in a unit test.
   if (extension_service &&
       extension_service->GetInstalledExtension(extension->id()))
     return true;
 
+  if (extension) {
+    bool was_installed_by_default = extension->was_installed_by_default();
+#ifdef OS_CHROMEOS
+    // On Chrome OS all external sources are controlled by us so it means that
+    // they are "default". Method was_installed_by_default returns false because
+    // extensions creation flags are ignored in case of default extensions with
+    // update URL(the flags aren't passed to OnExternalExtensionUpdateUrlFound).
+    // TODO(dpolukhin): remove this Chrome OS specific code as soon as creation
+    // flags are not ignored.
+    was_installed_by_default =
+        extensions::Manifest::IsExternalLocation(extension->location());
+#endif
+    if (extension->location() == extensions::Manifest::COMPONENT ||
+        was_installed_by_default) {
+      return true;
+    }
+  }
+
   if (error)
     *error = tmp_error;
   return false;
 }
 
 bool ManagedUserService::UserMayModifySettings(
     const extensions::Extension* extension,
     string16* error) const {
   return ExtensionManagementPolicyImpl(error);
 }
@@ skipping 184 matching lines @@
       profile_->GetPrefs()->GetDictionary(prefs::kManagedModeManualURLs);
   scoped_ptr<std::map<GURL, bool> > url_map(new std::map<GURL, bool>());
   for (DictionaryValue::Iterator it(*dict); !it.IsAtEnd(); it.Advance()) {
     bool allow = false;
     bool result = it.value().GetAsBoolean(&allow);
     DCHECK(result);
     (*url_map)[GURL(it.key())] = allow;
   }
   url_filter_context_.SetManualURLs(url_map.Pass());
 }