OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/settings/device_settings_provider.h" | 5 #include "chrome/browser/chromeos/settings/device_settings_provider.h" |
6 | 6 |
7 #include "base/bind.h" | 7 #include "base/bind.h" |
8 #include "base/bind_helpers.h" | 8 #include "base/bind_helpers.h" |
9 #include "base/callback.h" | 9 #include "base/callback.h" |
10 #include "base/command_line.h" | 10 #include "base/command_line.h" |
11 #include "base/file_util.h" | 11 #include "base/file_util.h" |
12 #include "base/logging.h" | 12 #include "base/logging.h" |
13 #include "base/metrics/histogram.h" | 13 #include "base/metrics/histogram.h" |
14 #include "base/prefs/pref_service.h" | 14 #include "base/prefs/pref_service.h" |
15 #include "base/string_util.h" | 15 #include "base/string_util.h" |
16 #include "base/threading/thread_restrictions.h" | 16 #include "base/threading/thread_restrictions.h" |
17 #include "base/values.h" | 17 #include "base/values.h" |
18 #include "chrome/browser/browser_process.h" | 18 #include "chrome/browser/browser_process.h" |
19 #include "chrome/browser/chromeos/cros/cros_library.h" | 19 #include "chrome/browser/chromeos/cros/cros_library.h" |
20 #include "chrome/browser/chromeos/cros/network_library.h" | 20 #include "chrome/browser/chromeos/cros/network_library.h" |
21 #include "chrome/browser/chromeos/policy/app_pack_updater.h" | |
22 #include "chrome/browser/chromeos/settings/cros_settings.h" | 21 #include "chrome/browser/chromeos/settings/cros_settings.h" |
23 #include "chrome/browser/chromeos/settings/cros_settings_names.h" | 22 #include "chrome/browser/chromeos/settings/cros_settings_names.h" |
24 #include "chrome/browser/chromeos/settings/device_settings_cache.h" | 23 #include "chrome/browser/chromeos/settings/device_settings_cache.h" |
25 #include "chrome/browser/policy/browser_policy_connector.h" | 24 #include "chrome/browser/policy/browser_policy_connector.h" |
26 #include "chrome/browser/policy/cloud/cloud_policy_constants.h" | 25 #include "chrome/browser/policy/cloud/cloud_policy_constants.h" |
27 #include "chrome/browser/policy/cloud/proto/device_management_backend.pb.h" | 26 #include "chrome/browser/policy/cloud/proto/device_management_backend.pb.h" |
28 #include "chrome/browser/ui/options/options_util.h" | 27 #include "chrome/browser/ui/options/options_util.h" |
29 #include "chrome/common/chrome_switches.h" | 28 #include "chrome/common/chrome_switches.h" |
30 #include "chrome/installer/util/google_update_settings.h" | 29 #include "chrome/installer/util/google_update_settings.h" |
31 | 30 |
32 using google::protobuf::RepeatedPtrField; | 31 using google::protobuf::RepeatedPtrField; |
33 | 32 |
34 namespace em = enterprise_management; | 33 namespace em = enterprise_management; |
35 | 34 |
36 namespace chromeos { | 35 namespace chromeos { |
37 | 36 |
38 namespace { | 37 namespace { |
39 | 38 |
40 // List of settings handled by the DeviceSettingsProvider. | 39 // List of settings handled by the DeviceSettingsProvider. |
41 const char* kKnownSettings[] = { | 40 const char* kKnownSettings[] = { |
42 kAccountsPrefAllowGuest, | 41 kAccountsPrefAllowGuest, |
43 kAccountsPrefAllowNewUser, | 42 kAccountsPrefAllowNewUser, |
44 kAccountsPrefDeviceLocalAccounts, | 43 kAccountsPrefDeviceLocalAccounts, |
| 44 kAccountsPrefDeviceLocalAccountAutoLoginBailoutEnabled, |
45 kAccountsPrefDeviceLocalAccountAutoLoginDelay, | 45 kAccountsPrefDeviceLocalAccountAutoLoginDelay, |
46 kAccountsPrefDeviceLocalAccountAutoLoginId, | 46 kAccountsPrefDeviceLocalAccountAutoLoginId, |
47 kAccountsPrefEphemeralUsersEnabled, | 47 kAccountsPrefEphemeralUsersEnabled, |
48 kAccountsPrefShowUserNamesOnSignIn, | 48 kAccountsPrefShowUserNamesOnSignIn, |
49 kAccountsPrefUsers, | 49 kAccountsPrefUsers, |
50 kAllowRedeemChromeOsRegistrationOffers, | 50 kAllowRedeemChromeOsRegistrationOffers, |
51 kAppPack, | 51 kAppPack, |
52 kDeviceAttestationEnabled, | 52 kDeviceAttestationEnabled, |
53 kDeviceOwner, | 53 kDeviceOwner, |
54 kIdleLogoutTimeout, | 54 kIdleLogoutTimeout, |
(...skipping 164 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
219 em::ShowUserNamesOnSigninProto* show = | 219 em::ShowUserNamesOnSigninProto* show = |
220 device_settings_.mutable_show_user_names(); | 220 device_settings_.mutable_show_user_names(); |
221 bool show_value; | 221 bool show_value; |
222 if (value->GetAsBoolean(&show_value)) | 222 if (value->GetAsBoolean(&show_value)) |
223 show->set_show_user_names(show_value); | 223 show->set_show_user_names(show_value); |
224 else | 224 else |
225 NOTREACHED(); | 225 NOTREACHED(); |
226 } else if (prop == kAccountsPrefDeviceLocalAccounts) { | 226 } else if (prop == kAccountsPrefDeviceLocalAccounts) { |
227 em::DeviceLocalAccountsProto* device_local_accounts = | 227 em::DeviceLocalAccountsProto* device_local_accounts = |
228 device_settings_.mutable_device_local_accounts(); | 228 device_settings_.mutable_device_local_accounts(); |
229 base::ListValue* accounts_list; | 229 device_local_accounts->clear_account(); |
| 230 const base::ListValue* accounts_list = NULL; |
230 if (value->GetAsList(&accounts_list)) { | 231 if (value->GetAsList(&accounts_list)) { |
231 for (base::ListValue::const_iterator entry(accounts_list->begin()); | 232 for (base::ListValue::const_iterator entry(accounts_list->begin()); |
232 entry != accounts_list->end(); ++entry) { | 233 entry != accounts_list->end(); ++entry) { |
233 std::string id; | 234 const base::DictionaryValue* entry_dict = NULL; |
234 if ((*entry)->GetAsString(&id)) | 235 if ((*entry)->GetAsDictionary(&entry_dict)) { |
235 device_local_accounts->add_account()->set_id(id); | 236 em::DeviceLocalAccountInfoProto* account = |
236 else | 237 device_local_accounts->add_account(); |
| 238 std::string id; |
| 239 if (entry_dict->GetStringWithoutPathExpansion( |
| 240 kAccountsPrefDeviceLocalAccountsKeyId, &id)) { |
| 241 account->set_id(id); |
| 242 } |
| 243 int type; |
| 244 if (entry_dict->GetIntegerWithoutPathExpansion( |
| 245 kAccountsPrefDeviceLocalAccountsKeyType, &type)) { |
| 246 account->set_type( |
| 247 static_cast<em::DeviceLocalAccountInfoProto::AccountType>( |
| 248 type)); |
| 249 } |
| 250 std::string kiosk_app_id; |
| 251 if (entry_dict->GetStringWithoutPathExpansion( |
| 252 kAccountsPrefDeviceLocalAccountsKeyKioskAppId, |
| 253 &kiosk_app_id)) { |
| 254 account->set_kiosk_app_id(kiosk_app_id); |
| 255 } |
| 256 std::string kiosk_app_update_url; |
| 257 if (entry_dict->GetStringWithoutPathExpansion( |
| 258 kAccountsPrefDeviceLocalAccountsKeyKioskAppUpdateURL, |
| 259 &kiosk_app_update_url)) { |
| 260 account->set_kiosk_app_update_url(kiosk_app_update_url); |
| 261 } |
| 262 } else { |
237 NOTREACHED(); | 263 NOTREACHED(); |
| 264 } |
238 } | 265 } |
239 } else { | 266 } else { |
240 NOTREACHED(); | 267 NOTREACHED(); |
241 } | 268 } |
242 } else if (prop == kAccountsPrefDeviceLocalAccountAutoLoginId) { | 269 } else if (prop == kAccountsPrefDeviceLocalAccountAutoLoginId) { |
243 em::DeviceLocalAccountsProto* device_local_accounts = | 270 em::DeviceLocalAccountsProto* device_local_accounts = |
244 device_settings_.mutable_device_local_accounts(); | 271 device_settings_.mutable_device_local_accounts(); |
245 std::string id; | 272 std::string id; |
246 if (value->GetAsString(&id)) | 273 if (value->GetAsString(&id)) |
247 device_local_accounts->set_auto_login_id(id); | 274 device_local_accounts->set_auto_login_id(id); |
248 else | 275 else |
249 NOTREACHED(); | 276 NOTREACHED(); |
250 } else if (prop == kAccountsPrefDeviceLocalAccountAutoLoginDelay) { | 277 } else if (prop == kAccountsPrefDeviceLocalAccountAutoLoginDelay) { |
251 em::DeviceLocalAccountsProto* device_local_accounts = | 278 em::DeviceLocalAccountsProto* device_local_accounts = |
252 device_settings_.mutable_device_local_accounts(); | 279 device_settings_.mutable_device_local_accounts(); |
253 int delay; | 280 int delay; |
254 if (value->GetAsInteger(&delay)) | 281 if (value->GetAsInteger(&delay)) |
255 device_local_accounts->set_auto_login_delay(delay); | 282 device_local_accounts->set_auto_login_delay(delay); |
256 else | 283 else |
257 NOTREACHED(); | 284 NOTREACHED(); |
| 285 } else if (prop == kAccountsPrefDeviceLocalAccountAutoLoginBailoutEnabled) { |
| 286 em::DeviceLocalAccountsProto* device_local_accounts = |
| 287 device_settings_.mutable_device_local_accounts(); |
| 288 bool enabled; |
| 289 if (value->GetAsBoolean(&enabled)) |
| 290 device_local_accounts->set_enable_auto_login_bailout(enabled); |
| 291 else |
| 292 NOTREACHED(); |
258 } else if (prop == kSignedDataRoamingEnabled) { | 293 } else if (prop == kSignedDataRoamingEnabled) { |
259 em::DataRoamingEnabledProto* roam = | 294 em::DataRoamingEnabledProto* roam = |
260 device_settings_.mutable_data_roaming_enabled(); | 295 device_settings_.mutable_data_roaming_enabled(); |
261 bool roaming_value = false; | 296 bool roaming_value = false; |
262 if (value->GetAsBoolean(&roaming_value)) | 297 if (value->GetAsBoolean(&roaming_value)) |
263 roam->set_data_roaming_enabled(roaming_value); | 298 roam->set_data_roaming_enabled(roaming_value); |
264 else | 299 else |
265 NOTREACHED(); | 300 NOTREACHED(); |
266 ApplyRoamingSetting(roaming_value); | 301 ApplyRoamingSetting(roaming_value); |
267 } else if (prop == kSettingProxyEverywhere) { | 302 } else if (prop == kSettingProxyEverywhere) { |
(...skipping 158 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
426 base::ListValue* list = new base::ListValue(); | 461 base::ListValue* list = new base::ListValue(); |
427 const em::UserWhitelistProto& whitelist_proto = policy.user_whitelist(); | 462 const em::UserWhitelistProto& whitelist_proto = policy.user_whitelist(); |
428 const RepeatedPtrField<std::string>& whitelist = | 463 const RepeatedPtrField<std::string>& whitelist = |
429 whitelist_proto.user_whitelist(); | 464 whitelist_proto.user_whitelist(); |
430 for (RepeatedPtrField<std::string>::const_iterator it = whitelist.begin(); | 465 for (RepeatedPtrField<std::string>::const_iterator it = whitelist.begin(); |
431 it != whitelist.end(); ++it) { | 466 it != whitelist.end(); ++it) { |
432 list->Append(new base::StringValue(*it)); | 467 list->Append(new base::StringValue(*it)); |
433 } | 468 } |
434 new_values_cache->SetValue(kAccountsPrefUsers, list); | 469 new_values_cache->SetValue(kAccountsPrefUsers, list); |
435 | 470 |
436 base::ListValue* account_list = new base::ListValue(); | 471 scoped_ptr<base::ListValue> account_list(new base::ListValue()); |
437 CommandLine* command_line = CommandLine::ForCurrentProcess(); | 472 CommandLine* command_line = CommandLine::ForCurrentProcess(); |
438 if (!command_line->HasSwitch(switches::kDisableLocalAccounts)) { | 473 if (!command_line->HasSwitch(switches::kDisableLocalAccounts)) { |
439 const em::DeviceLocalAccountsProto device_local_accounts_proto = | 474 const em::DeviceLocalAccountsProto device_local_accounts_proto = |
440 policy.device_local_accounts(); | 475 policy.device_local_accounts(); |
441 const RepeatedPtrField<em::DeviceLocalAccountInfoProto>& accounts = | 476 const RepeatedPtrField<em::DeviceLocalAccountInfoProto>& accounts = |
442 device_local_accounts_proto.account(); | 477 device_local_accounts_proto.account(); |
443 RepeatedPtrField<em::DeviceLocalAccountInfoProto>::const_iterator entry; | 478 RepeatedPtrField<em::DeviceLocalAccountInfoProto>::const_iterator entry; |
444 for (entry = accounts.begin(); entry != accounts.end(); ++entry) { | 479 for (entry = accounts.begin(); entry != accounts.end(); ++entry) { |
445 if (entry->has_id()) | 480 scoped_ptr<base::DictionaryValue> entry_dict(new base::DictionaryValue()); |
446 account_list->AppendString(entry->id()); | 481 if (entry->has_id()) { |
| 482 entry_dict->SetStringWithoutPathExpansion( |
| 483 kAccountsPrefDeviceLocalAccountsKeyId, entry->id()); |
| 484 } |
| 485 entry_dict->SetIntegerWithoutPathExpansion( |
| 486 kAccountsPrefDeviceLocalAccountsKeyType, entry->type()); |
| 487 if (entry->has_kiosk_app_id()) { |
| 488 entry_dict->SetStringWithoutPathExpansion( |
| 489 kAccountsPrefDeviceLocalAccountsKeyKioskAppId, |
| 490 entry->kiosk_app_id()); |
| 491 } |
| 492 if (entry->has_kiosk_app_update_url()) { |
| 493 entry_dict->SetStringWithoutPathExpansion( |
| 494 kAccountsPrefDeviceLocalAccountsKeyKioskAppUpdateURL, |
| 495 entry->kiosk_app_update_url()); |
| 496 } |
| 497 account_list->Append(entry_dict.release()); |
447 } | 498 } |
448 } | 499 } |
449 new_values_cache->SetValue(kAccountsPrefDeviceLocalAccounts, account_list); | 500 new_values_cache->SetValue(kAccountsPrefDeviceLocalAccounts, |
450 | 501 account_list.release()); |
451 if (policy.has_start_up_flags()) { | |
452 base::ListValue* list = new base::ListValue(); | |
453 const em::StartUpFlagsProto& flags_proto = policy.start_up_flags(); | |
454 const RepeatedPtrField<std::string>& flags = flags_proto.flags(); | |
455 for (RepeatedPtrField<std::string>::const_iterator it = flags.begin(); | |
456 it != flags.end(); ++it) { | |
457 list->Append(new base::StringValue(*it)); | |
458 } | |
459 new_values_cache->SetValue(kStartUpFlags, list); | |
460 } | |
461 | 502 |
462 if (policy.has_device_local_accounts()) { | 503 if (policy.has_device_local_accounts()) { |
463 if (policy.device_local_accounts().has_auto_login_id()) { | 504 if (policy.device_local_accounts().has_auto_login_id()) { |
464 new_values_cache->SetString( | 505 new_values_cache->SetString( |
465 kAccountsPrefDeviceLocalAccountAutoLoginId, | 506 kAccountsPrefDeviceLocalAccountAutoLoginId, |
466 policy.device_local_accounts().auto_login_id()); | 507 policy.device_local_accounts().auto_login_id()); |
467 } | 508 } |
468 if (policy.device_local_accounts().has_auto_login_delay()) { | 509 if (policy.device_local_accounts().has_auto_login_delay()) { |
469 new_values_cache->SetInteger( | 510 new_values_cache->SetInteger( |
470 kAccountsPrefDeviceLocalAccountAutoLoginDelay, | 511 kAccountsPrefDeviceLocalAccountAutoLoginDelay, |
471 policy.device_local_accounts().auto_login_delay()); | 512 policy.device_local_accounts().auto_login_delay()); |
472 } | 513 } |
473 } | 514 } |
| 515 |
| 516 new_values_cache->SetBoolean( |
| 517 kAccountsPrefDeviceLocalAccountAutoLoginBailoutEnabled, |
| 518 policy.device_local_accounts().enable_auto_login_bailout()); |
| 519 |
| 520 if (policy.has_start_up_flags()) { |
| 521 base::ListValue* list = new base::ListValue(); |
| 522 const em::StartUpFlagsProto& flags_proto = policy.start_up_flags(); |
| 523 const RepeatedPtrField<std::string>& flags = flags_proto.flags(); |
| 524 for (RepeatedPtrField<std::string>::const_iterator it = flags.begin(); |
| 525 it != flags.end(); ++it) { |
| 526 list->Append(new base::StringValue(*it)); |
| 527 } |
| 528 new_values_cache->SetValue(kStartUpFlags, list); |
| 529 } |
474 } | 530 } |
475 | 531 |
476 void DeviceSettingsProvider::DecodeKioskPolicies( | 532 void DeviceSettingsProvider::DecodeKioskPolicies( |
477 const em::ChromeDeviceSettingsProto& policy, | 533 const em::ChromeDeviceSettingsProto& policy, |
478 PrefValueMap* new_values_cache) const { | 534 PrefValueMap* new_values_cache) const { |
479 if (policy.has_forced_logout_timeouts()) { | 535 if (policy.has_forced_logout_timeouts()) { |
480 if (policy.forced_logout_timeouts().has_idle_logout_timeout()) { | 536 if (policy.forced_logout_timeouts().has_idle_logout_timeout()) { |
481 new_values_cache->SetInteger( | 537 new_values_cache->SetInteger( |
482 kIdleLogoutTimeout, | 538 kIdleLogoutTimeout, |
483 policy.forced_logout_timeouts().idle_logout_timeout()); | 539 policy.forced_logout_timeouts().idle_logout_timeout()); |
(...skipping 21 matching lines...) Expand all Loading... |
505 } | 561 } |
506 | 562 |
507 if (policy.has_app_pack()) { | 563 if (policy.has_app_pack()) { |
508 typedef RepeatedPtrField<em::AppPackEntryProto> proto_type; | 564 typedef RepeatedPtrField<em::AppPackEntryProto> proto_type; |
509 base::ListValue* list = new base::ListValue; | 565 base::ListValue* list = new base::ListValue; |
510 const proto_type& app_pack = policy.app_pack().app_pack(); | 566 const proto_type& app_pack = policy.app_pack().app_pack(); |
511 for (proto_type::const_iterator it = app_pack.begin(); | 567 for (proto_type::const_iterator it = app_pack.begin(); |
512 it != app_pack.end(); ++it) { | 568 it != app_pack.end(); ++it) { |
513 base::DictionaryValue* entry = new base::DictionaryValue; | 569 base::DictionaryValue* entry = new base::DictionaryValue; |
514 if (it->has_extension_id()) { | 570 if (it->has_extension_id()) { |
515 entry->SetString(policy::AppPackUpdater::kExtensionId, | 571 entry->SetStringWithoutPathExpansion(kAppPackKeyExtensionId, |
516 it->extension_id()); | 572 it->extension_id()); |
517 } | 573 } |
518 if (it->has_update_url()) | 574 if (it->has_update_url()) { |
519 entry->SetString(policy::AppPackUpdater::kUpdateUrl, it->update_url()); | 575 entry->SetStringWithoutPathExpansion(kAppPackKeyUpdateUrl, |
| 576 it->update_url()); |
| 577 } |
520 list->Append(entry); | 578 list->Append(entry); |
521 } | 579 } |
522 new_values_cache->SetValue(kAppPack, list); | 580 new_values_cache->SetValue(kAppPack, list); |
523 } | 581 } |
524 | 582 |
525 if (policy.has_start_up_urls()) { | 583 if (policy.has_start_up_urls()) { |
526 base::ListValue* list = new base::ListValue(); | 584 base::ListValue* list = new base::ListValue(); |
527 const em::StartUpUrlsProto& urls_proto = policy.start_up_urls(); | 585 const em::StartUpUrlsProto& urls_proto = policy.start_up_urls(); |
528 const RepeatedPtrField<std::string>& urls = urls_proto.start_up_urls(); | 586 const RepeatedPtrField<std::string>& urls = urls_proto.start_up_urls(); |
529 for (RepeatedPtrField<std::string>::const_iterator it = urls.begin(); | 587 for (RepeatedPtrField<std::string>::const_iterator it = urls.begin(); |
(...skipping 342 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
872 void DeviceSettingsProvider::AttemptMigration() { | 930 void DeviceSettingsProvider::AttemptMigration() { |
873 if (device_settings_service_->HasPrivateOwnerKey()) { | 931 if (device_settings_service_->HasPrivateOwnerKey()) { |
874 PrefValueMap::const_iterator i; | 932 PrefValueMap::const_iterator i; |
875 for (i = migration_values_.begin(); i != migration_values_.end(); ++i) | 933 for (i = migration_values_.begin(); i != migration_values_.end(); ++i) |
876 DoSet(i->first, *i->second); | 934 DoSet(i->first, *i->second); |
877 migration_values_.Clear(); | 935 migration_values_.Clear(); |
878 } | 936 } |
879 } | 937 } |
880 | 938 |
881 } // namespace chromeos | 939 } // namespace chromeos |
OLD | NEW |