Extension API enterprise.platformKeys.

chrome/common/extensions/permissions/permission_set_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "base/json/json_file_value_serializer.h"
 #include "base/logging.h"
 #include "base/path_service.h"
 #include "base/strings/utf_string_conversions.h"
 #include "chrome/common/chrome_paths.h"
@@ skipping 657 matching lines @@
   skip.insert(APIPermission::kSystemDisplay);
   skip.insert(APIPermission::kSystemMemory);
   skip.insert(APIPermission::kSystemNetwork);
   skip.insert(APIPermission::kSystemStorage);
   skip.insert(APIPermission::kTts);
   skip.insert(APIPermission::kUnlimitedStorage);
   skip.insert(APIPermission::kWebcamPrivate);
   skip.insert(APIPermission::kWebView);
   skip.insert(APIPermission::kWindowShape);
 
+  // These permissions are restricted to extensions force-installed by policy

[pneubeck (no reviews), 2014/05/22 17:59:37]

@Benjamin, is this OK?

[not at google - send to devlin, 2014/05/22 18:03:01]

is what ok?

[pneubeck (no reviews), 2014/05/22 18:06:27]

this change to this test.
Maybe we could change it in a follow up to skip all permissions with
location:policy.

[not at google - send to devlin, 2014/05/22 18:09:09]

as in, is it ok that the platform keys API doesn't have a permission string? I
think yes.

+  // and don't require a prompt, i.e. they're restricted to location 'policy'.
+  skip.insert(APIPermission::kEnterprisePlatformKeys);
+
   // TODO(erikkay) add a string for this permission.
   skip.insert(APIPermission::kBackground);
 
   skip.insert(APIPermission::kClipboardWrite);
 
   // The cookie permission does nothing unless you have associated host
   // permissions.
   skip.insert(APIPermission::kCookie);
 
   // These are warned as part of host permission checks.
@@ skipping 880 matching lines @@
   scoped_refptr<const PermissionSet> permissions_dwr(
       extension_dwr->GetActivePermissions());
 
   EXPECT_FALSE(PermissionMessageProvider::Get()->
                    IsPrivilegeIncrease(permissions.get(),
                                        permissions_dwr.get(),
                                        extension->GetType()));
 }
 
 }  // namespace extensions