Add "kiosk_only" manifest attribute for platform apps.

chrome/browser/extensions/crx_installer.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/crx_installer.h"
 
 #include <map>
 #include <set>
 
 #include "base/bind.h"
@@ skipping 20 matching lines @@
 #include "chrome/browser/extensions/extension_system.h"
 #include "chrome/browser/extensions/permissions_updater.h"
 #include "chrome/browser/extensions/webstore_installer.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/web_applications/web_app.h"
 #include "chrome/common/chrome_paths.h"
 #include "chrome/common/extensions/extension_constants.h"
 #include "chrome/common/extensions/extension_file_util.h"
 #include "chrome/common/extensions/extension_icon_set.h"
 #include "chrome/common/extensions/feature_switch.h"
+#include "chrome/common/extensions/manifest_handlers/kiosk_mode_info.h"
 #include "chrome/common/extensions/manifest_handlers/shared_module_info.h"
 #include "chrome/common/extensions/manifest_url_handler.h"
 #include "chrome/common/extensions/permissions/permission_set.h"
 #include "chrome/common/extensions/permissions/permissions_data.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/notification_service.h"
 #include "content/public/browser/resource_dispatcher_host.h"
 #include "content/public/browser/user_metrics.h"
 #include "extensions/common/manifest.h"
 #include "extensions/common/user_script.h"
 #include "grit/chromium_strings.h"
 #include "grit/generated_resources.h"
 #include "grit/theme_resources.h"
 #include "third_party/skia/include/core/SkBitmap.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "ui/base/resource/resource_bundle.h"
 
+#if defined(OS_CHROMEOS)
+#include "chrome/browser/chromeos/login/user_manager.h"
+#endif
+
 using content::BrowserThread;
 using content::UserMetricsAction;
 using extensions::SharedModuleInfo;
 
 namespace extensions {
 
 namespace {
 
 // Used in histograms; do not change order.
 enum OffStoreInstallDecision {
@@ skipping 437 matching lines @@
   // deal with it.
   ConfirmInstall();
 }
 
 void CrxInstaller::ConfirmInstall() {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
   ExtensionService* service = service_weak_.get();
   if (!service || service->browser_terminating())
     return;
 
+  if (KioskOnlyInfo::IsKioskOnly(installer_.extension())) {

[not at google - send to devlin, 2013/09/24 18:35:17]

installation sure; but what about extension loading? I remember the email about
this but being confused...

[Tim Song, 2013/09/24 18:50:01]

Can an extension be loaded without being first installed?

[not at google - send to devlin, 2013/09/24 18:55:18]

I mean like, if somebody installs in kiosk mode then switches into non-kiosk
mode.

Also there is the unpacked installation case.

Lastly: what happens if an extension is installed in kiosk mode then synced to a
profile that isn't in kiosk mode?

[Tim Song, 2013/09/24 19:09:06]

For kiosk mode, ChromeOS generates a special local account and cryptohome for
each app that is registered to be run in kiosk mode. You can't login to this
account for a regular session nor can you sync the profile.

[not at google - send to devlin, 2013/09/24 19:22:27]

Ok cool.

You might want to still be cautious and add this check in UnpackedInstaller,
since on desktop somebody could grab the CRX, unpack it, then install it that
way. Maybe you don't want that.

One last question here though: what about policy installations?

+    bool in_kiosk_mode = false;
+#if defined(OS_CHROMEOS)
+    chromeos::UserManager* user_manager = chromeos::UserManager::Get();
+    in_kiosk_mode = user_manager && user_manager->IsLoggedInAsKioskApp();
+#endif
+    if (!in_kiosk_mode) {
+      ReportFailureFromUIThread(CrxInstallerError(
+          l10n_util::GetStringUTF16(
+              IDS_EXTENSION_INSTALL_KIOSK_MODE_ONLY)));
+    }
+  }
+
   string16 error = installer_.CheckManagementPolicy();
   if (!error.empty()) {
     // We don't want to show the error infobar for installs from the WebStore,
     // because the WebStore already shows an error dialog itself.
     // Note: |client_| can be NULL in unit_tests!
     if (extension()->from_webstore() && client_)
       client_->install_ui()->set_skip_post_install_ui(true);
     ReportFailureFromUIThread(CrxInstallerError(error));
     return;
   }
@@ skipping 288 matching lines @@
   if (!prefs->DidExtensionEscalatePermissions(extension()->id()))
     return;
 
   if (client_) {
     AddRef();  // Balanced in InstallUIProceed() and InstallUIAbort().
     client_->ConfirmReEnable(this, extension());
   }
 }
 
 }  // namespace extensions