Public Sessions - prompt the user for tabCapture requests

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 433 matching lines @@
     // This would provie access to auth cookies, so needs to be blocked.
     // "cookies",
 
     // Provides access to the DOM, so block.
     // "debugger",
 
     // This is mostly fine, but has a RequestContentScript action that'd allow
     // access to page content, which we can't allow.
     // "declarativeContent",
 
-    // Allow, but either (1) ask user for confirmation or (2) return blank
-    // capture.
-    // "desktopCapture",
+    // User is prompted when an extension requests desktopCapture whether they
+    // want to allow it. The request is made through
+    // chrome.desktopCapture.chooseDesktopMedia call.
+    "desktopCapture",

[Sergey Ulanov, 2016/12/08 05:10:35]

Please mention this change in the CL description.

[Ivan Šandrk, 2016/12/08 14:10:25]

Done.

 
     // Haven't checked in detail what this does, but messing with devtools
     // usually comes with the ability to access page content.
     // "devtools",
 
     // I think it's fine to allow this as it should be obvious to users that
     // scanning a document on the scanner will make it available to the
     // organization (placing a document in the scanner implies user consent).
     "documentScan",
 
@@ skipping 152 matching lines @@
 
     // Memory parameters access.
     "system.memory",
 
     // Enumerates network interfaces.
     "system.network",
 
     // Enumerates removable storage.
     "system.storage",
 
-    // Provides access to screen contents, so block. Alternatively, (1) prompt
-    // for user consent or (2) return blank capture.
-    // "tabCapture",
+    // User is prompted (allow/deny) when an extension requests tabCapture. The
+    // request is made via chrome.tabCapture.capture call.
+    "tabCapture",
 
     // Privacy sensitive URL access.
     // "tabs",
 
     // Privacy sensitive URL access.
     // "topSites",
 
     // Allows to generate TTS, but no content access. Just UX.
     "tts",
 
@@ skipping 291 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos