Add enterprise policy to turn off Bluetooth.

chrome/browser/policy/policy_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stddef.h>
 #include <stdint.h>
 #include <algorithm>
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 18 matching lines @@
 #include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/test/test_file_util.h"
 #include "base/threading/sequenced_worker_pool.h"
 #include "base/time/time.h"
 #include "base/values.h"
 #include "build/build_config.h"
 #include "chrome/app/chrome_command_ids.h"
 #include "chrome/browser/background/background_contents_service.h"
 #include "chrome/browser/browser_process.h"
+#include "chrome/browser/chrome_content_browser_client.h"
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/content_settings/tab_specific_content_settings.h"
 #include "chrome/browser/devtools/devtools_window_testing.h"
 #include "chrome/browser/download/download_prefs.h"
 #include "chrome/browser/extensions/api/messaging/message_service.h"
 #include "chrome/browser/extensions/crx_installer.h"
 #include "chrome/browser/extensions/extension_management_constants.h"
 #include "chrome/browser/extensions/extension_management_test_util.h"
 #include "chrome/browser/extensions/extension_service.h"
 #include "chrome/browser/extensions/shared_module_service.h"
@@ skipping 3598 matching lines @@
             this));
 
     base::MessageLoop::current()->Run();
   }
 }
 
 INSTANTIATE_TEST_CASE_P(MediaStreamDevicesControllerBrowserTestInstance,
                         MediaStreamDevicesControllerBrowserTest,
                         testing::Bool());
 
+IN_PROC_BROWSER_TEST_F(PolicyTest, BlockWebBluetooth) {
+  ChromeContentBrowserClient client;
+  EXPECT_TRUE(client.AllowWebBluetooth());
+
+  PolicyMap policies;
+  policies.Set(key::kDefaultWebBluetoothGuardSetting, POLICY_LEVEL_MANDATORY,
+               POLICY_SCOPE_USER, POLICY_SOURCE_CLOUD,
+               new base::FundamentalValue(2), nullptr);
+  UpdateProviderPolicy(policies);
+
+  // See BluetoothDispatcherHostTest.ContentClientCanDisableAPI for evidence

[bartfab (slow), 2016/02/25 17:37:50]

We try hard to make our browser tests be truly end-to-end. Would it be possible
to bring up the Bluetooth stack here and verify that it is affected by the
policy?

[Jeffrey Yasskin, 2016/02/25 20:38:50]

It turns out to be really hard. To run a bluetooth test, we have to fake the
BluetoothAdapter to return true from IsPresent, for which we use
content::BluetoothDispatcherHost::SetBluetoothAdapterForTesting(). The Policy
code lives in chrome/ or chrome-level components, which can't call directly into
the content/ layer.

If we overcame that, I'd still need to drive the renderer to call into the
Bluetooth API. (I could send the IPCs directly to the BluetoothDispatcherHost,
and do something to intercept the responses, but jam@'s rejected similar
attempts in the past.) RenderFrameHost::ExecuteJavaScriptWithUserGestureForTests
offers a way to do that, but only allows getting a response from Javascript that
can return synchronously. navigator.bluetooth.requestDevice() returns a Promise,
so can't work with this system.

As discussed over IM, I'll keep watching for a way to do this in a single test,
but I'll leave the 2-part test for this CL.

[Jeffrey Yasskin, 2016/02/25 22:34:49]

Gio pointed out the device::BluetoothAdapterFactory::SetAdapterForTesting()
function that doesn't go through the content/ API, and I re-discovered
content::ExecuteScriptAndExtractString, which can handle asynchronous results,
at which point the unified test became easy. Let me know what you think.

[bartfab (slow), 2016/02/26 18:00:44]

Thanks for that. Looks great!

+  // that this actually prevents Web Bluetooth from working.
+  EXPECT_FALSE(client.AllowWebBluetooth());
+}
+
 // Test that when extended reporting opt-in is disabled by policy, the
 // opt-in checkbox does not appear on SSL blocking pages.
 IN_PROC_BROWSER_TEST_F(PolicyTest, SafeBrowsingExtendedReportingOptInAllowed) {
   net::EmbeddedTestServer https_server_expired(
       net::EmbeddedTestServer::TYPE_HTTPS);
   https_server_expired.SetSSLConfig(net::EmbeddedTestServer::CERT_EXPIRED);
   https_server_expired.ServeFilesFromSourceDirectory("chrome/test/data");
   ASSERT_TRUE(https_server_expired.Start());
 
   // Set the enterprise policy to disallow opt-in.
@@ skipping 271 matching lines @@
                POLICY_SCOPE_USER,
                POLICY_SOURCE_CLOUD,
                new base::FundamentalValue(false),
                NULL);
   UpdateProviderPolicy(policies);
   EXPECT_FALSE(display_manager->unified_desktop_enabled());
 }
 #endif  // defined(OS_CHROMEOS)
 
 }  // namespace policy