Adding a policy for using the uiAccess enabled It2Me binary on Windows

components/policy/resources/policy_templates.json

 {
 # policy_templates.json - Metafile for policy templates
 #
 # The content of this file is evaluated as a Python expression.
 #
 # This file is used as input to generate the following policy templates:
 # ADM, ADMX+ADML, MCX/plist and html documentation.
 #
 # Policy templates are user interface definitions or documents about the
 # policies that can be used to configure Chrome. Each policy is a name-value
@@ skipping 119 matching lines @@
 #   templates and documentation. The policy definition list that Chrome sees
 #   will include policies marked with 'future'. If a WIP policy isn't meant to
 #   be seen by the policy providers either, the 'supported_on' key should be set
 #   to an empty list.
 #
 # IDs:
 #   Since a Protocol Buffer definition is generated from this file, unique and
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 340
+#   For your editing convenience: highest ID currently used: 342
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
 #     $1 -> Google Chrome / Chromium
 #     $2 -> Google Chrome OS / Chromium OS
 #     $3 -> Google Chrome Frame / Chromium Frame
 #     $6 is reserved for doc_writer
 #
 # Device Policy:
 #   An additional flag 'device_only' (optional, defaults to False) indicates
@@ skipping 840 matching lines @@
             'per_profile': False,
           },
           'example_value': '{ "RemoteAccessHostMatchUsername": true }',
           'id': 289,
           'caption': '''Policy overrides for Debug builds of the remote access host''',
           'tags': [],
           'desc': '''Overrides policies on Debug builds of the remote access host.
 
           The value is parsed as a JSON dictionary of policy name to policy value mappings.''',
         },
+        {
+          'name': 'RemoteAssistanceHostAllowUiAccess',

[Sergey Ulanov, 2016/08/18 05:55:51]

Many RemoteAccess* policies are applicable for It2Me host as well, so it  may be
confusing that you are adding RemoteAssistance prefix. I would prefer reusing
RemoteAccess prefix for all policies.
Maybe RemoteAccessHostAllowUiAccessForRemoteAssistance or
RemoteAccessHostAssistanceUiAccess

[joedow, 2016/08/18 17:06:07]

I went back and forth on this a bit.  Using the RemoteAccessHost prefix led to a
much longer name than I liked, but I'm fine with it.

+          'type': 'main',
+          'schema': { 'type': 'boolean' },
+          'supported_on': ['chrome.win:54-'],
+          'features': {
+            'dynamic_refresh': False,
+            'per_profile': False,
+          },
+          'example_value': True,
+          'id': 341,
+          'caption': '''Allow remote users to interact with elevated windows in remote assistance sessions''',
+          'tags': [],
+          'desc': '''If this setting is enabled, the remote assistance host will be run in a process with uiAccess permissions.  This will allow remote users to interact with elevated windows on the local user's desktop.

[Thiemo Nagel, 2016/08/18 11:46:17]

What's that uiAccess?  It seems like a non-translatable term, thus please tag
with <ph...> as described at the top of the file.

[joedow, 2016/08/18 17:06:07]

Done.

+
+          If this setting is disabled or not configured, the remote assistance host will run in the user's context and remote users cannot interact with elevated windows on the desktop.''',

[Sergey Ulanov, 2016/08/18 05:55:51]

Can we enable UI access by default?

[joedow, 2016/08/18 17:06:07]

We decided to disable this by default as enabling it will require an additional
dialog for the user to click-through and the decision was to keep the default
flow as simple as possible but expose this setting for Admins and enterprise.

+        },
       ],
     },
     {
       'name': 'PrintingEnabled',
       'type': 'main',
       'schema': { 'type': 'boolean' },
       'supported_on': ['chrome.*:8-', 'chrome_os:11-', 'android:39-'],
       'features': {
         'dynamic_refresh': True,
         'per_profile': True,
@@ skipping 7942 matching lines @@
       'desc': '''Text appended in parentheses next to the policies top-level container to indicate that those policies are of the Recommended level''',
       'text': 'Default Settings (users can override)',
     },
     'doc_complex_policies_on_windows': {
       'desc': '''Text pointing the user to a help article for complex policies on Windows''',
       'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POLICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<ex>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>''',
     },
   },
   'placeholders': [],
 }