Add cr_policy_indicator for settings controls

chrome/browser/extensions/api/settings_private/prefs_util.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include "chrome/browser/extensions/api/settings_private/prefs_util.h"
+
 #include "base/prefs/pref_service.h"
 #include "chrome/browser/browser_process.h"
-#include "chrome/browser/extensions/api/settings_private/prefs_util.h"
 #include "chrome/browser/extensions/chrome_extension_function.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/common/pref_names.h"
 #include "components/proxy_config/proxy_config_pref_names.h"
 #include "components/url_formatter/url_fixer.h"
+#include "extensions/browser/extension_pref_value_map.h"
+#include "extensions/browser/extension_pref_value_map_factory.h"
+#include "extensions/browser/extension_registry.h"
 
 #if defined(OS_CHROMEOS)
 #include "chrome/browser/chromeos/ownership/owner_settings_service_chromeos.h"
 #include "chrome/browser/chromeos/ownership/owner_settings_service_chromeos_factory.h"
+#include "chrome/browser/chromeos/policy/browser_policy_connector_chromeos.h"
+#include "chrome/browser/chromeos/profiles/profile_helper.h"
 #include "chrome/browser/chromeos/settings/cros_settings.h"
+#include "chromeos/settings/cros_settings_names.h"
 #endif
 
+namespace {
+
+#if defined(OS_CHROMEOS)
+bool IsPrivilegedCrosSetting(const std::string& pref_name) {
+  if (!chromeos::CrosSettings::IsCrosSettings(pref_name))
+    return false;
+  // kSystemTimezone should be changeable by all users.
+  if (pref_name == chromeos::kSystemTimezone)
+    return false;
+  // All other Cros settings are considered privileged and are either policy
+  // controlled or owner controlled.
+  return true;
+}
+#endif
+
+}  // namespace
+
 namespace extensions {
 
 namespace settings_private = api::settings_private;
 
-PrefsUtil::PrefsUtil(Profile* profile) : profile_(profile) {
-}
+PrefsUtil::PrefsUtil(Profile* profile) : profile_(profile) {}
 
-PrefsUtil::~PrefsUtil() {
-}
+PrefsUtil::~PrefsUtil() {}
 
 #if defined(OS_CHROMEOS)
 using CrosSettings = chromeos::CrosSettings;
 #endif
 
 const PrefsUtil::TypedPrefMap& PrefsUtil::GetWhitelistedKeys() {
   static PrefsUtil::TypedPrefMap* s_whitelist = nullptr;
   if (s_whitelist)
     return *s_whitelist;
   s_whitelist = new PrefsUtil::TypedPrefMap();
@@ skipping 62 matching lines @@
       settings_private::PrefType::PREF_TYPE_BOOLEAN;
   (*s_whitelist)["cros.device.attestation_for_content_protection_enabled"] =
       settings_private::PrefType::PREF_TYPE_BOOLEAN;
   (*s_whitelist)["settings.internet.wake_on_wifi_ssid"] =
       settings_private::PrefType::PREF_TYPE_BOOLEAN;
 #endif
 
   return *s_whitelist;
 }
 
-api::settings_private::PrefType PrefsUtil::GetType(const std::string& name,
-                                                   base::Value::Type type) {
+settings_private::PrefType PrefsUtil::GetType(const std::string& name,
+                                              base::Value::Type type) {
   switch (type) {
     case base::Value::Type::TYPE_BOOLEAN:
-      return api::settings_private::PrefType::PREF_TYPE_BOOLEAN;
+      return settings_private::PrefType::PREF_TYPE_BOOLEAN;
     case base::Value::Type::TYPE_INTEGER:
     case base::Value::Type::TYPE_DOUBLE:
-      return api::settings_private::PrefType::PREF_TYPE_NUMBER;
+      return settings_private::PrefType::PREF_TYPE_NUMBER;
     case base::Value::Type::TYPE_STRING:
-      return IsPrefTypeURL(name)
-                 ? api::settings_private::PrefType::PREF_TYPE_URL
-                 : api::settings_private::PrefType::PREF_TYPE_STRING;
+      return IsPrefTypeURL(name) ? settings_private::PrefType::PREF_TYPE_URL
+                                 : settings_private::PrefType::PREF_TYPE_STRING;
     case base::Value::Type::TYPE_LIST:
-      return api::settings_private::PrefType::PREF_TYPE_LIST;
+      return settings_private::PrefType::PREF_TYPE_LIST;
     default:
-      return api::settings_private::PrefType::PREF_TYPE_NONE;
+      return settings_private::PrefType::PREF_TYPE_NONE;
   }
 }
 
-scoped_ptr<api::settings_private::PrefObject> PrefsUtil::GetCrosSettingsPref(
+scoped_ptr<settings_private::PrefObject> PrefsUtil::GetCrosSettingsPref(
     const std::string& name) {
-  scoped_ptr<api::settings_private::PrefObject> pref_object(
-      new api::settings_private::PrefObject());
+  scoped_ptr<settings_private::PrefObject> pref_object(
+      new settings_private::PrefObject());
 
 #if defined(OS_CHROMEOS)
   const base::Value* value = CrosSettings::Get()->GetPref(name);
+  if (!value)
+    return nullptr;
   pref_object->key = name;
   pref_object->type = GetType(name, value->GetType());
   pref_object->value.reset(value->DeepCopy());
 #endif
 
   return pref_object.Pass();
 }
 
-scoped_ptr<api::settings_private::PrefObject> PrefsUtil::GetPref(
+scoped_ptr<settings_private::PrefObject> PrefsUtil::GetPref(
     const std::string& name) {
-  if (IsCrosSetting(name))
-    return GetCrosSettingsPref(name);
+  const PrefService::Preference* pref = nullptr;
+  scoped_ptr<settings_private::PrefObject> pref_object;
+  if (IsCrosSetting(name)) {

[michaelpg, 2015/09/14 05:14:51]

no need to check this on non-Chrome OS

[stevenjb, 2015/09/14 23:05:30]

Maybe fix in a re-factor.

+    pref_object = GetCrosSettingsPref(name);
+  } else {
+    PrefService* pref_service = FindServiceForPref(name);
+    pref = pref_service->FindPreference(name);
+    if (!pref)
+      return nullptr;
+    pref_object.reset(new settings_private::PrefObject());
+    pref_object->key = pref->name();
+    pref_object->type = GetType(name, pref->GetType());
+    pref_object->value.reset(pref->GetValue()->DeepCopy());
+  }
 
-  PrefService* pref_service = FindServiceForPref(name);
-  const PrefService::Preference* pref = pref_service->FindPreference(name);
+#if defined(OS_CHROMEOS)
+  if (IsPrefPrimaryUserControlled(name)) {

[michaelpg, 2015/09/14 05:14:51]

shouldn't we check enterprise policy first, since that would have a higher
precedence?

[stevenjb, 2015/09/14 23:05:30]

So, with the last iteration, I did think about the order, rather than using the
existing (and I am pretty certain mostly arbitrary) order.
* First off, it is unlikely that more than one of these will be true.
* For secondary users, the owner or policy state is irrelevant if the setting is
controlled by the primary user so we should show the primary user indicator
first.
* For owner controlled settings, the policy for the logged in user is also
irrelevant.

[michaelpg, 2015/09/16 18:58:52]

granted
Can there be different policies per user, or are policies always machine-wide?

[stevenjb, 2015/09/16 21:33:53]

Acknowledged.

+    pref_object->policy_source =
+        settings_private::PolicySource::POLICY_SOURCE_PRIMARY_USER;
+    pref_object->policy_enforcement =
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+    return pref_object.Pass();
+  }
+  if (IsPrefOwnerControlled(name)) {

[michaelpg, 2015/09/14 05:14:51]

this ordering also doesn't look right: for managed devices,
IsPrefOwnerControlled is equivalent to IsPrivilegedCrosSetting. so this would
always trigger for privileged preferences, and we'd set the policy source to
Owner instead of Policy.

[stevenjb, 2015/09/14 23:05:30]

Which is correct; the policy for the logged in user isn't relevant for owner
controlled settings. If it is controlled by a device policy that is arguably
relevant, but in practice only for the owner.

[michaelpg, 2015/09/16 18:58:52]

If it is an enrolled device there *is no owner*, but my fear is that
IsPrefOwnerControlled returns true anyway.

[stevenjb, 2015/09/16 21:33:53]

Yeah, the logic there is fragile at best. I'll go ahead and reverse the order.

+    pref_object->policy_source =
+        settings_private::PolicySource::POLICY_SOURCE_OWNER;
+    pref_object->policy_enforcement =
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+    return pref_object.Pass();
+  }
+  if (IsPrefEnterpriseManaged(name)) {
+    // Enterprise managed prefs are treated the same as device policy restricted
+    // prefs in the UI.
+    pref_object->policy_source =
+        settings_private::PolicySource::POLICY_SOURCE_DEVICE_POLICY;
+    pref_object->policy_enforcement =
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+    return pref_object.Pass();
+  }
+#endif
+
   if (!pref)
-    return nullptr;
-
-  scoped_ptr<api::settings_private::PrefObject> pref_object(
-      new api::settings_private::PrefObject());
-  pref_object->key = pref->name();
-  pref_object->type = GetType(name, pref->GetType());
-  pref_object->value.reset(pref->GetValue()->DeepCopy());
+    return pref_object.Pass();
 
   if (pref->IsManaged()) {
-    if (pref->IsManagedByCustodian()) {
-      pref_object->policy_source =
-          api::settings_private::PolicySource::POLICY_SOURCE_DEVICE;
-    } else {
-      pref_object->policy_source =
-          api::settings_private::PolicySource::POLICY_SOURCE_USER;
-    }
+    pref_object->policy_source =
+        settings_private::PolicySource::POLICY_SOURCE_USER_POLICY;
     pref_object->policy_enforcement =
-        pref->IsRecommended() ? api::settings_private::PolicyEnforcement::
-                                    POLICY_ENFORCEMENT_RECOMMENDED
-                              : api::settings_private::PolicyEnforcement::
-                                    POLICY_ENFORCEMENT_ENFORCED;
-  } else if (!IsPrefUserModifiable(name)) {
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+    return pref_object.Pass();
+  }
+  if (pref->IsRecommended()) {
     pref_object->policy_source =
-        api::settings_private::PolicySource::POLICY_SOURCE_USER;
+        settings_private::PolicySource::POLICY_SOURCE_USER_POLICY;
     pref_object->policy_enforcement =
-        api::settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_RECOMMENDED;
+    pref_object->recommended_value.reset(
+        pref->GetRecommendedValue()->DeepCopy());
+    return pref_object.Pass();
+  }
+  if (pref->IsExtensionControlled()) {
+    pref_object->policy_source =
+        settings_private::PolicySource::POLICY_SOURCE_EXTENSION;
+    pref_object->policy_enforcement =
+        settings_private::PolicyEnforcement::POLICY_ENFORCEMENT_ENFORCED;
+    std::string extension_id =
+        ExtensionPrefValueMapFactory::GetForBrowserContext(profile_)
+            ->GetExtensionControllingPref(pref->name());
+    pref_object->extension_id.reset(new std::string(extension_id));
+    return pref_object.Pass();
+  }
+  if (!pref->IsUserModifiable() || IsPrefSupervisorControlled(name)) {
+    // TODO(stevenjb): Investigate whether either of these should be badged.
+    pref_object->read_only.reset(new bool(true));
+    return pref_object.Pass();
   }
 
   return pref_object.Pass();
 }
 
 PrefsUtil::SetPrefResult PrefsUtil::SetPref(const std::string& pref_name,
                                             const base::Value* value) {
   if (IsCrosSetting(pref_name))
     return SetCrosSettingsPref(pref_name, value);
 
   PrefService* pref_service = FindServiceForPref(pref_name);
 
   if (!IsPrefUserModifiable(pref_name))
     return PREF_NOT_MODIFIABLE;
 
-  const PrefService::Preference* pref =
-      pref_service->FindPreference(pref_name);
+  const PrefService::Preference* pref = pref_service->FindPreference(pref_name);
   if (!pref)
     return PREF_NOT_FOUND;
 
   DCHECK_EQ(pref->GetType(), value->GetType());
 
   switch (pref->GetType()) {
     case base::Value::TYPE_BOOLEAN:
     case base::Value::TYPE_DOUBLE:
     case base::Value::TYPE_LIST:
       pref_service->Set(pref_name, *value);
@@ skipping 36 matching lines @@
       chromeos::OwnerSettingsServiceChromeOSFactory::GetForBrowserContext(
           profile_);
 
   // Check if setting requires owner.
   if (service && service->HandlesSetting(pref_name)) {
     if (service->Set(pref_name, *value))
       return SUCCESS;
     return PREF_NOT_MODIFIABLE;
   }
 
-  chromeos::CrosSettings::Get()->Set(pref_name, *value);
+  CrosSettings::Get()->Set(pref_name, *value);
   return SUCCESS;
 #else
   return PREF_NOT_FOUND;
 #endif
 }
 
 bool PrefsUtil::AppendToListCrosSetting(const std::string& pref_name,
                                         const base::Value& value) {
 #if defined(OS_CHROMEOS)
   chromeos::OwnerSettingsServiceChromeOS* service =
       chromeos::OwnerSettingsServiceChromeOSFactory::GetForBrowserContext(
           profile_);
 
   // Returns false if not the owner, for settings requiring owner.
   if (service && service->HandlesSetting(pref_name)) {
     return service->AppendToList(pref_name, value);
   }
 
-  chromeos::CrosSettings::Get()->AppendToList(pref_name, &value);
+  CrosSettings::Get()->AppendToList(pref_name, &value);
   return true;
 #else
   return false;
 #endif
 }
 
 bool PrefsUtil::RemoveFromListCrosSetting(const std::string& pref_name,
                                           const base::Value& value) {
 #if defined(OS_CHROMEOS)
   chromeos::OwnerSettingsServiceChromeOS* service =
       chromeos::OwnerSettingsServiceChromeOSFactory::GetForBrowserContext(
           profile_);
 
   // Returns false if not the owner, for settings requiring owner.
   if (service && service->HandlesSetting(pref_name)) {
     return service->RemoveFromList(pref_name, value);
   }
 
-  chromeos::CrosSettings::Get()->RemoveFromList(pref_name, &value);
+  CrosSettings::Get()->RemoveFromList(pref_name, &value);
   return true;
 #else
   return false;
 #endif
 }
 
 bool PrefsUtil::IsPrefTypeURL(const std::string& pref_name) {
   settings_private::PrefType pref_type =
       settings_private::PrefType::PREF_TYPE_NONE;
 
   const TypedPrefMap keys = GetWhitelistedKeys();
   const auto& iter = keys.find(pref_name);
   if (iter != keys.end())
     pref_type = iter->second;
 
   return pref_type == settings_private::PrefType::PREF_TYPE_URL;
 }
 
+#if defined(OS_CHROMEOS)
+bool PrefsUtil::IsPrefEnterpriseManaged(const std::string& pref_name) {
+  if (IsPrivilegedCrosSetting(pref_name)) {
+    policy::BrowserPolicyConnectorChromeOS* connector =
+        g_browser_process->platform_part()->browser_policy_connector_chromeos();
+    if (connector->IsEnterpriseManaged())
+      return true;
+  }
+  return false;
+}
+
+bool PrefsUtil::IsPrefOwnerControlled(const std::string& pref_name) {
+  if (IsPrivilegedCrosSetting(pref_name)) {
+    if (!chromeos::ProfileHelper::IsOwnerProfile(profile_))
+      return true;
+  }
+  return false;
+}
+
+bool PrefsUtil::IsPrefPrimaryUserControlled(const std::string& pref_name) {
+  if (pref_name == prefs::kWakeOnWifiSsid) {
+    user_manager::UserManager* user_manager = user_manager::UserManager::Get();
+    const user_manager::User* user =
+        chromeos::ProfileHelper::Get()->GetUserByProfile(profile_);
+    if (user && user->email() != user_manager->GetPrimaryUser()->email())
+      return true;
+  }
+  return false;
+}
+#endif
+
+bool PrefsUtil::IsPrefSupervisorControlled(const std::string& pref_name) {
+  if (pref_name == prefs::kBrowserGuestModeEnabled ||
+      pref_name == prefs::kBrowserAddPersonEnabled) {
+    if (profile_->IsSupervised())
+      return true;

[michaelpg, 2015/09/14 05:14:51]

nit: return IsSupervised();

or move this check to the beginning:
if (!IsSupervised)
  return false;
return pref_name == Guest || pref_name == AddPerson;

[stevenjb, 2015/09/14 23:05:31]

Did the opposite since IsSupervised() has some cost to it, but simplified.

+  }
+  return false;
+}
+
 bool PrefsUtil::IsPrefUserModifiable(const std::string& pref_name) {
-  if (pref_name != prefs::kBrowserGuestModeEnabled &&
-      pref_name != prefs::kBrowserAddPersonEnabled) {
-    return true;
-  }
-
   PrefService* pref_service = profile_->GetPrefs();
   const PrefService::Preference* pref =
       pref_service->FindPreference(pref_name.c_str());
-  if (!pref || !pref->IsUserModifiable() || profile_->IsSupervised())
-    return false;
-
-  return true;
+  return pref && pref->IsUserModifiable();
 }
 
 PrefService* PrefsUtil::FindServiceForPref(const std::string& pref_name) {
   PrefService* user_prefs = profile_->GetPrefs();
 
   // Proxy is a peculiar case: on ChromeOS, settings exist in both user
   // prefs and local state, but chrome://settings should affect only user prefs.
   // Elsewhere the proxy settings are stored in local state.
   // See http://crbug.com/157147
 
@@ skipping 19 matching lines @@
 
 bool PrefsUtil::IsCrosSetting(const std::string& pref_name) {
 #if defined(OS_CHROMEOS)
   return CrosSettings::Get()->IsCrosSettings(pref_name);
 #else
   return false;
 #endif
 }
 
 }  // namespace extensions