Implement cloud policy invalidations using the invalidation service framework.

chrome/browser/chromeos/policy/device_local_account_policy_store.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/device_local_account_policy_store.h"
 
 #include "base/bind.h"
 #include "base/callback.h"
 #include "base/values.h"
 #include "chrome/browser/policy/cloud/device_management_service.h"
@@ skipping 58 matching lines @@
 
 void DeviceLocalAccountPolicyStore::UpdatePolicy(
     UserCloudPolicyValidator* validator) {
   validation_status_ = validator->status();
   if (!validator->success()) {
     status_ = STATUS_VALIDATION_ERROR;
     NotifyStoreError();
     return;
   }
 
-  InstallPolicy(validator->policy_data().Pass(), validator->payload().Pass());
+  InstallPolicy(
+      validator->policy_data().Pass(),
+      validator->payload().Pass(),
+      validator->hash_value());

[Joao da Silva, 2013/07/23 20:44:47]

See comments in CloudPolicyStore: if the hash is computed at NotifyStoreLoaded()
(which is called whenever the policy changes, like at the end of this function)
then you won't have to change InstallPolicy().

[Steve Condie, 2013/07/24 01:42:04]

Done.

   // Exit the session when the lid is closed. The default behavior is to
   // suspend while leaving the session running, which is not desirable for
   // public sessions.
   policy_map_.Set(key::kLidCloseAction,
                   POLICY_LEVEL_MANDATORY,
                   POLICY_SCOPE_USER,
                   base::Value::CreateIntegerValue(
                       chromeos::PowerPolicyController::ACTION_STOP_SESSION),
                   NULL);
 
@@ skipping 90 matching lines @@
   validator->ValidateAgainstCurrentPolicy(
       policy(),
       CloudPolicyValidatorBase::TIMESTAMP_REQUIRED,
       CloudPolicyValidatorBase::DM_TOKEN_REQUIRED);
   validator->ValidatePayload();
   validator->ValidateSignature(*key->public_key(), false);
   validator.release()->StartValidation(callback);
 }
 
 }  // namespace policy