Public Session whitelisting - updated comments for app.window.*

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

Index: chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc
diff --git a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc
index f930fe525edb715dfb6ab536221b7397892b01d2..cfdb92384f50ea1ef7c6abf335ac5c28d8a1e141 100644
--- a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc
+++ b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc
@@ -390,15 +390,13 @@ const char* const kSafePermissionStrings[] = {
     // Schedule code to run at future times.
     "alarms",
 
-    // Allow, but keep PS UX on top regardless.
-    // "app.window.alwaysOnTop",
-
-    // TODO(isandrk): The following permissions need to be adjusted
-    // (crbug/651071).
-    // Fullscreen is a no-op for Public Session.  Whitelisting nevertheless to
-    // broaden the range of supported apps.  (The recommended permission names
-    // are "app.window.*" but their unprefixed counterparts are still
-    // supported.)
+    // PS UX can always be seen, this one doesn't go over it so it's fine.
+    "app.window.alwaysOnTop",
+
+    // Fullscreen is crippled in Public Sessions, maximizes instead, so both
+    // fullscreen and overrideEsc are safe for use in PS. (The recommended
+    // permission names are "app.window.*" but their unprefixed counterparts are
+    // still supported.)
     "app.window.fullscreen",
     "app.window.fullscreen.overrideEsc",
     "fullscreen",