Fix cyclic dependency between ProfilePolicyConnector and PrefService.

chrome/browser/chromeos/policy/network_policy_service.h

+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROMEOS_POLICY_NETWORK_POLICY_SERVICE_H_
+#define CHROME_BROWSER_CHROMEOS_POLICY_NETWORK_POLICY_SERVICE_H_
+
+#include <vector>
+
+#include "base/basictypes.h"
+#include "base/callback.h"
+#include "base/compiler_specific.h"
+#include "base/memory/scoped_ptr.h"
+#include "components/browser_context_keyed_service/browser_context_keyed_service.h"
+
+class PrefService;
+
+namespace chromeos {
+class User;
+}
+
+namespace net {
+class X509Certificate;
+typedef std::vector<scoped_refptr<X509Certificate> > CertificateList;
+}
+
+namespace policy {
+
+class PolicyCertVerifier;
+class PolicyService;
+class UserNetworkConfigurationUpdater;
+
+// This service manages the per-Profile network policy components, this includes
+// certificates.
+class NetworkPolicyService : public BrowserContextKeyedService {
+ public:
+  NetworkPolicyService(bool allow_trusted_certs_from_policy,
+                       const chromeos::User& user,
+                       PrefService* user_prefs,
+                       PolicyService* policy_service);
+  virtual ~NetworkPolicyService();
+
+  // Adds a CertVerifier on which the current list of Web trusted server and
+  // CA certificates will be set. Policy updates will trigger further calls to
+  // |cert_verifier| later. |cert_verifier| must be valid until it's removed
+  // with RemovePolicyCertVerifier. Calls to |cert_verifier| will happen on the
+  // IO thread. This function must be called on the UI thread.
+  void AddPolicyCertVerifier(PolicyCertVerifier* cert_verifier);
+
+  // Removes |cert_verifier| from further notifications.
+  void RemovePolicyCertVerifier(PolicyCertVerifier* cert_verifier);
+
+  // Returns a callback that should be called if a policy installed certificate
+  // was trusted for the associated profile. Must not be called after this
+  // object is destructed.
+  base::Closure GetPolicyCertTrustedCallback();
+
+  // Sets |certs| to the list of Web trusted server and CA certificates from the
+  // last received ONC user policy.
+  void GetWebTrustedCertificates(net::CertificateList* certs) const;
+
+  // Returns true if the profile with |user_prefs| has used certificates
+  // installed via policy to establish a secure connection before. This means
+  // that it may have cached content from an untrusted source.
+  bool UsedPolicyCertificates() const;
+
+  // BrowserContextKeyedService:
+  virtual void Shutdown() OVERRIDE;
+
+ private:
+  void SetUsedPolicyCertificatesOnce();
+
+  PrefService* user_prefs_;
+  scoped_ptr<UserNetworkConfigurationUpdater> network_configuration_updater_;
+
+  DISALLOW_COPY_AND_ASSIGN(NetworkPolicyService);
+};
+
+}  // namespace policy
+
+#endif  // CHROME_BROWSER_CHROMEOS_POLICY_NETWORK_POLICY_SERVICE_H_