Public Sessions - prompt the user for audioCapture/videoCapture requests

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 391 matching lines @@
     "overrideEscFullscreen",
 
     "app.window.shape",
 
     // The embedded app is subject to the restrictions as well obviously.
     "appview",
 
     // Risk of listening attack.
     // "audio",
 
-    // Need to surface notification to the user. Check what existing UI we have
-    // and whether that's sufficient for PS.
-    // "audioCapture",
+    // User is prompted (allow/deny) when an extension requests audioCapture.

[Andrew T Wilson (Slow), 2016/12/04 19:57:01]

Clarify this - "the user is prompted when the extension calls <some API>" -
explicitly state which API, both here and for videoCapture.

[Ivan Šandrk, 2016/12/05 17:04:46]

Done.

+    "audioCapture",
 
     // Just resource management, probably doesn't even apply to Chrome OS.
     "background",
 
     // Access to URLs only, no content.
     "bookmarks",
 
     // Open a new tab with a given URL.
     "browser",
 
@@ skipping 219 matching lines @@
 
     // Excessive resource usage is not a risk.
     "unlimitedStorage",
 
     // Plugging the USB device is sufficient as consent gesture.
     "usb",
 
     // Belongs to the USB API.
     "usbDevices",
 
-    // Need to surface notification to the user. Check what existing UI we have
-    // and whether that's sufficient for PS.
-    // "videoCapture",
+    // User is prompted (allow/deny) when an extension requests videoCapture.
+    "videoCapture",
 
     // Admin controls network config anyways.
     "vpnProvider",
 
     // Just UX.
     "wallpaper",
 
     // Privacy sensitive URL access.
     // "webNavigation",
 
@@ skipping 266 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos