Enable login screen apps.

chrome/browser/extensions/chrome_process_manager_delegate.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/chrome_process_manager_delegate.h"
 
 #include "base/command_line.h"
 #include "base/logging.h"
 #include "build/build_config.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/chrome_notification_types.h"
+#include "chrome/browser/extensions/extension_management.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/profiles/profile_manager.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/browser_finder.h"
 #include "chrome/common/chrome_switches.h"
 #include "components/user_manager/user_manager.h"
 #include "content/public/browser/notification_service.h"
 #include "extensions/browser/extension_system.h"
 #include "extensions/browser/process_manager.h"
 #include "extensions/browser/process_manager_factory.h"
+#include "extensions/common/extension.h"
 #include "extensions/common/one_shot_event.h"
 
+#if defined(OS_CHROMEOS)
+#include "chrome/browser/chromeos/profiles/profile_helper.h"
+#endif
+
 namespace extensions {
 
 ChromeProcessManagerDelegate::ChromeProcessManagerDelegate() {
   registrar_.Add(this,
                  chrome::NOTIFICATION_BROWSER_WINDOW_READY,
                  content::NotificationService::AllSources());
   registrar_.Add(this,
                  chrome::NOTIFICATION_PROFILE_CREATED,
                  content::NotificationService::AllSources());
   registrar_.Add(this,
                  chrome::NOTIFICATION_PROFILE_DESTROYED,
                  content::NotificationService::AllSources());
 }
 
 ChromeProcessManagerDelegate::~ChromeProcessManagerDelegate() {
 }
 
-bool ChromeProcessManagerDelegate::IsBackgroundPageAllowed(
+bool ChromeProcessManagerDelegate::AreBackgroundPagesAllowedForContext(
     content::BrowserContext* context) const {
-  Profile* profile = static_cast<Profile*>(context);
+  Profile* profile = Profile::FromBrowserContext(context);
 
   bool is_normal_session = !profile->IsGuestSession() &&
                            !profile->IsSystemProfile();
-#if defined(OS_CHROMEOS)
-  is_normal_session = is_normal_session &&
-                      user_manager::UserManager::Get()->IsUserLoggedIn();
-#endif
 
   // Disallow if the current session is a Guest mode session or login screen but
   // the current browser context is *not* off-the-record. Such context is
   // artificial and background page shouldn't be created in it.
   // http://crbug.com/329498
   return is_normal_session || profile->IsOffTheRecord();
 }
 
+bool ChromeProcessManagerDelegate::IsExtensionBackgroundPageAllowed(
+    content::BrowserContext* context,
+    const Extension& extension) const {
+#if defined(OS_CHROMEOS)
+  Profile* profile = Profile::FromBrowserContext(context);
+
+  const bool is_signin_profile =
+      chromeos::ProfileHelper::IsSigninProfile(profile) &&
+      !profile->IsOffTheRecord();
+
+  if (is_signin_profile) {
+    // Check for flag.
+    const bool login_screen_apps_enabled =
+        base::CommandLine::ForCurrentProcess()->HasSwitch(
+            switches::kEnableLoginScreenApps);

[Mr4D (OOO till 08-26), 2017/03/23 14:38:37]

You might consider to early out here if false.

[achuithb, 2017/03/23 17:55:50]

Done.

+
+    // Get login screen apps installed by policy.
+    std::unique_ptr<base::DictionaryValue> login_screen_apps_list =
+        ExtensionManagementFactory::GetForBrowserContext(context)
+            ->GetForceInstallList();
+
+    // For the ChromeOS login profile, only allow apps installed by device
+    // policy.
+    return login_screen_apps_enabled &&
+           login_screen_apps_list->HasKey(extension.id());
+  }
+#endif
+
+  return AreBackgroundPagesAllowedForContext(context);
+}
+
 bool ChromeProcessManagerDelegate::DeferCreatingStartupBackgroundHosts(
     content::BrowserContext* context) const {
-  Profile* profile = static_cast<Profile*>(context);
+  Profile* profile = Profile::FromBrowserContext(context);
 
   // The profile may not be valid yet if it is still being initialized.
   // In that case, defer loading, since it depends on an initialized profile.
   // Background hosts will be loaded later via NOTIFICATION_PROFILE_CREATED.
   // http://crbug.com/222473
   if (!g_browser_process->profile_manager()->IsValidProfile(profile))
     return true;
 
   // There are no browser windows open and the browser process was
   // started to show the app launcher. Background hosts will be loaded later
@@ skipping 92 matching lines @@
     ProcessManager* incognito_manager =
         ProcessManagerFactory::GetForBrowserContextIfExists(
             profile->GetOffTheRecordProfile());
     if (incognito_manager) {
       incognito_manager->CloseBackgroundHosts();
     }
   }
 }
 
 }  // namespace extensions