cros: Added a new function to quick unlock api for checking unfinished pins.

components/policy/resources/policy_templates.json

 {
 # policy_templates.json - Metafile for policy templates
 #
 # The content of this file is evaluated as a Python expression.
 #
 # This file is used as input to generate the following policy templates:
 # ADM, ADMX+ADML, MCX/plist and html documentation.
 #
 # Policy templates are user interface definitions or documents about the
 # policies that can be used to configure Chrome. Each policy is a name-value
@@ skipping 121 matching lines @@
 #   templates and documentation. The policy definition list that Chrome sees
 #   will include policies marked with 'future'. If a WIP policy isn't meant to
 #   be seen by the policy providers either, the 'supported_on' key should be set
 #   to an empty list.
 #
 # IDs:
 #   Since a Protocol Buffer definition is generated from this file, unique and
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 353
+#   For your editing convenience: highest ID currently used: 356
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
 #     $1 -> Google Chrome / Chromium
 #     $2 -> Google Chrome OS / Chromium OS
 #     $3 -> Google Chrome Frame / Chromium Frame
 #     $6 is reserved for doc_writer
 #
 # Device Policy:
 #   An additional flag 'device_only' (optional, defaults to False) indicates
@@ skipping 9041 matching lines @@
 
       Printer setup is completed upon the first use of a printer.  PPDs are not
       downloaded until the printer is used.  After that time, frequently used
       PPDs are cached.
 
       This policy has no effect on whether users can configure printers on
       individual devices.  It is intended to be supplementary to the
       configuration of printers by individual users.''',
     },
     {
-      'name': 'QuickUnlockModeWhitelist',
-      'type': 'list',
-      'schema': {
-        'type': 'array',
-        'items': {
-          'type': 'string',
-          'enum': [
-            'all',
-            'PIN'
-          ],
-        },
-        'id': 'QuickUnlockModeWhitelist',
-      },
-      'supported_on': ['chrome_os:56-'],
-      'features': {
-        'dynamic_refresh': True,
-        'per_profile': True,
-      },
-      'example_value': ['PIN'],
-      'id': 352,
-      'caption': '''Configure allowed quick unlock modes.''',
-      'tags': [],
-      'desc': '''Controls which quick unlock modes are allowed to be set up and used.
-      This setting white-lists the allowed quick unlock modes that can be set up and used to unlock the lock screen. The value is a list of strings, each of which should be one of the following: "all", "PIN". If "all" is selected, then all supported quick modes will be available, otherwise the modes in the list will be the ones available.
+      'name': 'QuickUnlock',
+      'type': 'group',
+      'caption': '''Quick unlock policies''',
+      'desc': '''Configures quick unlock related policies.''',
+      'policies': [
+        {
+          'name': 'QuickUnlockModeWhitelist',
+          'type': 'list',
+          'schema': {
+            'type': 'array',
+            'items': {
+              'type': 'string',
+              'enum': [
+                'all',
+                'PIN'
+              ],
+            },
+            'id': 'QuickUnlockModeWhitelist',
+          },
+          'supported_on': ['chrome_os:56-'],
+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': True,
+          },
+          'example_value': ['PIN'],
+          'id': 352,
+          'caption': '''Configure allowed quick unlock modes.''',
+          'tags': [],
+          'desc': '''Controls which quick unlock modes are allowed to be set up and used.
+          This setting white-lists the allowed quick unlock modes that can be set up and used to unlock the lock screen. The value is a list of strings, each of which should be one of the following: "all", "PIN". If "all" is selected, then all supported quick modes will be available, otherwise the modes in the list will be the ones available.
 
-      If this setting is configured, quick unlock modes which have a type that is not on this list can not be set up or used.
+          If this setting is configured, quick unlock modes which have a type that is not on this list can not be set up or used.
 
-      If this setting is left not configured, "PIN" mode will be enabled, and all other modes will be disabled.''',
-    },
-    {
-      'name': 'QuickUnlockTimeout',
-      'type': 'int-enum',
-      'schema': {
-        'type': 'integer',
-        'enum': [ 0, 1, 2, 3 ],
-      },
-      'items': [
-        {
-          'name': 'SixHours',
-          'value': 0,
-          'caption': '''Password entry is required every six hours.''',
+          If this setting is left not configured, "PIN" mode will be enabled, and all other modes will be disabled.''',
         },
         {
-          'name': 'TweleveHours',
-          'value': 1,
-          'caption': '''Password entry is required every twelve hours.''',
+          'name': 'QuickUnlockTimeout',
+          'type': 'int-enum',
+          'schema': {
+            'type': 'integer',
+            'enum': [ 0, 1, 2, 3 ],
+          },
+          'items': [
+            {
+              'name': 'SixHours',
+              'value': 0,
+              'caption': '''Password entry is required every six hours.''',
+            },
+            {
+              'name': 'TweleveHours',
+              'value': 1,
+              'caption': '''Password entry is required every twelve hours.''',
+            },
+            {
+              'name': 'Day',
+              'value': 2,
+              'caption': '''Password entry is required every day (24 hours).''',
+            },
+            {
+              'name': 'Week',
+              'value': 3,
+              'caption': '''Password entry is required every week (168 hours).''',
+            },
+          ],
+          'supported_on': ['chrome_os:56-'],

[pastarmovj, 2016/12/08 09:02:19]

nit: please bump up to 57 unless you are planning to merge (highly unlikely
given that this is UI change).

[sammiequon, 2016/12/08 21:51:07]

Done.

+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': True,
+          },
+          'example_value': 2,
+          'id': 353,
+          'caption': '''Sets how often user has to enter password to use quick unlock.''',
+          'tags': [],
+          'desc': '''This setting controls how often the lock screen will request the password to be entered in order to continue using quick unlock. Each time the lock screen is entered, if the last password entry was more than this setting, the quick unlock will not be available on entering the lock screen. Should the user stay on the lock screen past this period of time, a password will be requested next time the user enters the wrong code, or re-enters the lock screen, whichever comes first.
+
+          If this setting is configured, users using quick unlock will be requested to enter their passwords on the lock screen depending on this setting.
+
+          If this setting is not configured, users using quick unlock will be requested to enter their password on the lock screen every day.''',
         },
         {
-          'name': 'Day',
-          'value': 2,
-          'caption': '''Password entry is required every day (24 hours).''',
+          'name': 'PinUnlockMinimumLength',
+          'type': 'int',
+          'schema': { 'type': 'integer' },
+          'supported_on': ['chrome_os:56-'],

[pastarmovj, 2016/12/08 09:02:19]

nit:ditto.

[sammiequon, 2016/12/08 21:51:07]

Done.

+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,

[pastarmovj, 2016/12/08 09:02:19]

Just a question here. Why are these policies below not per profile while the top
one is?

[sammiequon, 2016/12/08 21:51:07]

That is a mistake they should all be true. Done.

+          },
+          'example_value': 4,
+          'id': 354,
+          'caption': '''Sets the minimum length of the lock screen PIN.''',
+          'tags': [],
+          'desc': '''This setting controls the minimum length a PIN can be.
+
+          If this setting is configured to be less than 1, the minimum length a PIN can be is 1.
+
+          If this setting is not configured, the minimum length a PIN can be is 4.''',
         },
         {
-          'name': 'Week',
-          'value': 3,
-          'caption': '''Password entry is required every week (168 hours).''',
+          'name': 'PinUnlockMaximumLength',
+          'type': 'int',
+          'schema': { 'type': 'integer' },
+          'supported_on': ['chrome_os:56-'],

[pastarmovj, 2016/12/08 09:02:19]

nit:ditto.

[sammiequon, 2016/12/08 21:51:07]

Done.

+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,
+          },
+          'example_value': 0,
+          'id': 355,
+          'caption': '''Sets the maximum length of the lock screen PIN.''',
+          'tags': [],
+          'desc': '''This setting controls the maximum length a PIN can be.
+
+          If this setting is configured to be 0 or less, there is no maximum length and a user can set a PIN as long as they want.
+
+          If this setting is less than PinUnlockMinimumLength but greater than 0, the maximum length is the same as the minimum length.
+
+          If this setting is not configured, there is no maximum length and a user can set a PIN as long as they want.''',
+        },
+        {
+          'name': 'PinUnlockWeakPinsAllowed',
+          'type': 'main',
+          'schema': { 'type': 'boolean' },
+          'supported_on': ['chrome_os:56-'],

[pastarmovj, 2016/12/08 09:02:19]

nit: ditto.

[sammiequon, 2016/12/08 21:51:07]

Done.

+          'features': {
+            'dynamic_refresh': True,
+            'per_profile': False,
+          },
+          'example_value': False,
+          'id': 356,
+          'caption': '''Enables users to set weak PINs for the lock screen PIN.''',
+          'tags': [],
+          'desc': '''If this setting is configured to be false, users will be prevented from setting PINs that are considered weak. Such PINs include PINs which contain the same digit throughout, PINs whose digits are increasing by 1, PINs whose digits are decreasing by 1 and PINs which are too common.
+
+          If this setting is configured to be true, or not configured, users can enter these PINs and will only get a warning display.''',
         },
       ],
-      'supported_on': ['chrome_os:56-'],
-      'features': {
-        'dynamic_refresh': True,
-        'per_profile': True,
-      },
-      'example_value': 2,
-      'id': 353,
-      'caption': '''Sets how often user has to enter password to use quick unlock.''',
-      'tags': [],
-      'desc': '''This setting controls how often the lock screen will request the password to be entered in order to continue using quick unlock. Each time the lock screen is entered, if the last password entry was more than this setting, the quick unlock will not be available on entering the lock screen. Should the user stay on the lock screen past this period of time, a password will be requested next time the user enters the wrong code, or re-enters the lock screen, whichever comes first.
-
-      If this setting is configured, users using quick unlock will be requested to enter their passwords on the lock screen depending on this setting.
-
-      If this setting is not configured, users using quick unlock will be requested to enter their password on the lock screen every day.''',
     },
   ],
   'messages': {
     # Messages that are not associated to any policies.
     'win_supported_winxpsp2': {
       'desc': '''A label specifying the oldest possible compatible version of Windows. This text will appear right next to a label containing the text 'Supported on:'.''',
       'text': '''Microsoft Windows XP SP2 or later'''
     },
     'mac_chrome_preferences': {
       'desc': '''A text indicating in Mac OS X Workgroup Manager, that currently the preferences of Chromium are being edited''',
@@ skipping 114 matching lines @@
       'desc': '''Text appended in parentheses next to the policies top-level container to indicate that those policies are of the Recommended level''',
       'text': 'Default Settings (users can override)',
     },
     'doc_complex_policies_on_windows': {
       'desc': '''Text pointing the user to a help article for complex policies on Windows''',
       'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POLICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<ex>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>''',
     },
   },
   'placeholders': [],
 }