Fix cyclic dependency between ProfilePolicyConnector and PrefService.

chrome/browser/chromeos/policy/network_policy_service_factory.cc

+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/chromeos/policy/network_policy_service_factory.h"
+
+#include "base/memory/singleton.h"
+#include "chrome/browser/browser_process.h"
+#include "chrome/browser/chromeos/login/user.h"
+#include "chrome/browser/chromeos/login/user_manager.h"
+#include "chrome/browser/chromeos/policy/network_policy_service.h"
+#include "chrome/browser/policy/browser_policy_connector.h"
+#include "chrome/browser/policy/cloud/cloud_policy_constants.h"
+#include "chrome/browser/policy/profile_policy_connector.h"
+#include "chrome/browser/policy/profile_policy_connector_factory.h"
+#include "chrome/browser/profiles/incognito_helpers.h"
+#include "chrome/browser/profiles/profile.h"
+#include "chrome/common/pref_names.h"
+#include "components/browser_context_keyed_service/browser_context_dependency_manager.h"
+#include "components/user_prefs/pref_registry_syncable.h"
+
+namespace policy {
+
+// static
+NetworkPolicyService* NetworkPolicyServiceFactory::GetForProfile(
+    Profile* profile) {
+  return static_cast<NetworkPolicyService*>(
+      GetInstance()->GetServiceForBrowserContext(profile, true));
+}
+
+// static
+NetworkPolicyServiceFactory* NetworkPolicyServiceFactory::GetInstance() {
+  return Singleton<NetworkPolicyServiceFactory>::get();
+}
+
+NetworkPolicyServiceFactory::NetworkPolicyServiceFactory()
+    : BrowserContextKeyedServiceFactory(
+          "NetworkPolicyService",
+          BrowserContextDependencyManager::GetInstance()) {
+  DependsOn(ProfilePolicyConnectorFactory::GetInstance());
+}
+
+NetworkPolicyServiceFactory::~NetworkPolicyServiceFactory() {}
+
+content::BrowserContext* NetworkPolicyServiceFactory::GetBrowserContextToUse(
+    content::BrowserContext* context) const {
+  return chrome::GetBrowserContextRedirectedInIncognito(context);
+}
+
+BrowserContextKeyedService*
+NetworkPolicyServiceFactory::BuildServiceInstanceFor(
+    content::BrowserContext* context) const {
+  Profile* profile = static_cast<Profile*>(context);
+  if (profile->IsLoginProfile())
+    return NULL;
+
+  chromeos::UserManager* user_manager = chromeos::UserManager::Get();
+  chromeos::User* user = user_manager->GetUserByProfile(profile);
+  DCHECK(user);
+  if (user != user_manager->GetPrimaryUser())
+    return NULL;
+
+  BrowserPolicyConnector* browser_connector =
+      g_browser_process->browser_policy_connector();
+
+  // Allow trusted certs from policy only for accounts with managed user
+  // affiliation, i.e users that are managed by the same domain as the device.
+  bool allow_trusted_certs_from_policy =
+      browser_connector->GetUserAffiliation(user->email()) ==
+          USER_AFFILIATION_MANAGED &&
+      user->GetType() == chromeos::User::USER_TYPE_REGULAR;
+
+  ProfilePolicyConnector* profile_connector =
+      ProfilePolicyConnectorFactory::GetForProfile(profile);
+
+  return new NetworkPolicyService(allow_trusted_certs_from_policy,
+                                  *user,
+                                  profile->GetPrefs(),
+                                  profile_connector->policy_service());
+}
+
+void NetworkPolicyServiceFactory::RegisterProfilePrefs(
+    user_prefs::PrefRegistrySyncable* registry) {
+  registry->RegisterBooleanPref(
+      prefs::kUsedPolicyCertificatesOnce,
+      false,
+      user_prefs::PrefRegistrySyncable::UNSYNCABLE_PREF);
+}
+
+}  // namespace policy