Allow SAML logins to use the webcam

chrome/browser/chromeos/policy/device_policy_decoder_chromeos.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/device_policy_decoder_chromeos.h"
 
 #include <limits>
 #include <string>
 
 #include "base/callback.h"
@@ skipping 307 matching lines @@
 
   if (policy.has_allow_bluetooth()) {
     const em::AllowBluetoothProto& container(policy.allow_bluetooth());
     if (container.has_allow_bluetooth()) {
       policies->Set(key::kDeviceAllowBluetooth, POLICY_LEVEL_MANDATORY,
                     POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD,
                     new base::FundamentalValue(container.allow_bluetooth()),
                     nullptr);
     }
   }
+
+  if (policy.has_login_video_capture_allowed_urls()) {
+    const em::LoginVideoCaptureAllowedUrlsProto& container(
+        policy.login_video_capture_allowed_urls());
+    base::ListValue* urls = new base::ListValue();

[bartfab (slow), 2016/05/02 10:30:28]

Nit 1: const pointer.
Nit 2: A unique_ptr would be semantically cleaner.

[Kevin Cernekee, 2016/05/02 20:02:29]

1) Done
2) Don't think that will work here, because PolicyMap::Set() takes ownership of
the |value| argument.  (It crashed when I tried it.)

[bartfab (slow), 2016/05/03 16:14:15]

Sure, you need to relase() when hading over ownership to PolicyMap::Set().

[Kevin Cernekee, 2016/05/03 17:54:54]

Done.

+    RepeatedPtrField<std::string>::const_iterator entry;
+    for (entry = container.urls().begin(); entry != container.urls().end();
+         ++entry) {
+      urls->Append(new base::StringValue(*entry));
+    }
+    policies->Set(key::kLoginVideoCaptureAllowedUrls, POLICY_LEVEL_MANDATORY,
+                  POLICY_SCOPE_MACHINE, POLICY_SOURCE_CLOUD, urls, nullptr);
+  }
 }
 
 void DecodeNetworkPolicies(const em::ChromeDeviceSettingsProto& policy,
                            PolicyMap* policies) {
   if (policy.has_data_roaming_enabled()) {
     const em::DataRoamingEnabledProto& container(policy.data_roaming_enabled());
     if (container.has_data_roaming_enabled()) {
       policies->Set(key::kDeviceDataRoamingEnabled,
                     POLICY_LEVEL_MANDATORY,
                     POLICY_SCOPE_MACHINE,
@@ skipping 584 matching lines @@
   // Decode the various groups of policies.
   DecodeLoginPolicies(policy, policies);
   DecodeNetworkPolicies(policy, policies);
   DecodeReportingPolicies(policy, policies);
   DecodeAutoUpdatePolicies(policy, policies);
   DecodeAccessibilityPolicies(policy, policies);
   DecodeGenericPolicies(policy, policies);
 }
 
 }  // namespace policy