Disallow user overrides to enterprise policy for plugins.

chrome/browser/ui/webui/plugins/plugins_handler.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/plugins/plugins_handler.h"
 
 #include <memory>
 #include <vector>
 
 #include "base/bind.h"
@@ skipping 243 matching lines @@
       if (!active_plugin || (plugin_enabled && !group_enabled))
         active_plugin = group_plugin;
       group_enabled = plugin_enabled || group_enabled;
     }
 
     plugin_data->enabled_mode = mojo::String::From(
         GetPluginGroupEnabledMode(plugin_files, group_enabled));
 
     plugin_data->always_allowed = false;
     plugin_data->trusted = false;
+    plugin_data->policy_click_to_play = GetClickToPlayPolicyEnabled();
 
     if (group_enabled) {
       if (plugin_metadata->GetSecurityStatus(*active_plugin) ==
           PluginMetadata::SECURITY_STATUS_FULLY_TRUSTED) {
         plugin_data->trusted = true;
         plugin_data->always_allowed = true;
-      } else {
+      } else if (!GetClickToPlayPolicyEnabled()) {
         const base::DictionaryValue* whitelist =
             profile->GetPrefs()->GetDictionary(
                 prefs::kContentSettingsPluginWhitelist);
         whitelist->GetBoolean(group_identifier, &plugin_data->always_allowed);
       }
     }
 
     plugin_data->critical = false;
     plugin_data->update_url = "";
 #if defined(ENABLE_PLUGIN_INSTALLATION)
     bool out_of_date = plugin_metadata->GetSecurityStatus(*active_plugin) ==
                        PluginMetadata::SECURITY_STATUS_OUT_OF_DATE;
     plugin_data->critical = out_of_date;
     plugin_data->update_url = plugin_metadata->plugin_url().spec();
 #endif
 
     plugin_data->description = mojo::String::From(active_plugin->desc);
     plugin_data->name = base::UTF16ToUTF8(plugin_metadata->name());
     plugin_data->plugin_files = std::move(plugin_files);
     plugin_data->version = mojo::String::From(active_plugin->version);
     plugins_data.push_back(std::move(plugin_data));
   }
 
   return plugins_data;
 }
 
+bool PluginsPageHandler::GetClickToPlayPolicyEnabled() const {
+  Profile* profile = Profile::FromWebUI(web_ui_);
+  HostContentSettingsMap* map =
+      HostContentSettingsMapFactory::GetForProfile(profile);
+  std::string provider_id;
+  ContentSetting setting = map->GetDefaultContentSetting(
+      CONTENT_SETTINGS_TYPE_PLUGINS, &provider_id);
+  return (setting == CONTENT_SETTING_ASK && provider_id == "policy");
+}
+
 mojom::PluginFilePtr PluginsPageHandler::GeneratePluginFile(
     const WebPluginInfo& plugin,
     const base::string16& group_name,
     bool plugin_enabled) const {
   mojom::PluginFilePtr plugin_file(mojom::PluginFile::New());
   plugin_file->description = mojo::String::From(GetPluginDescription(plugin));
   plugin_file->enabled_mode = mojo::String::From(
       GetPluginEnabledMode(plugin.name, group_name, plugin_enabled));
   plugin_file->name = mojo::String::From(plugin.name);
   plugin_file->path = mojo::String::From(plugin.path.value());
@@ skipping 46 matching lines @@
   }
 
   if (plugins_enabled_by_policy)
     return "enabledByPolicy";
   if (plugins_disabled_by_policy)
     return "disabledByPolicy";
   if (plugins_managed_by_policy)
     return "managedByPolicy";
   return group_enabled ? "enabledByUser" : "disabledByUser";
 }