| Index: chrome/browser/chromeos/policy/user_active_directory_policy_manager.cc
|
| diff --git a/chrome/browser/chromeos/policy/user_active_directory_policy_manager.cc b/chrome/browser/chromeos/policy/user_active_directory_policy_manager.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..5f5aa8fa868b36cd8555bf92bc7a7b161e527034
|
| --- /dev/null
|
| +++ b/chrome/browser/chromeos/policy/user_active_directory_policy_manager.cc
|
| @@ -0,0 +1,105 @@
|
| +// Copyright 2016 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "chrome/browser/chromeos/policy/user_active_directory_policy_manager.h"
|
| +
|
| +#include <string>
|
| +#include <utility>
|
| +
|
| +#include "base/logging.h"
|
| +#include "base/memory/ptr_util.h"
|
| +#include "chromeos/dbus/auth_policy_client.h"
|
| +#include "chromeos/dbus/dbus_thread_manager.h"
|
| +#include "components/policy/core/common/policy_bundle.h"
|
| +#include "components/policy/core/common/policy_types.h"
|
| +
|
| +namespace policy {
|
| +
|
| +UserActiveDirectoryPolicyManager::UserActiveDirectoryPolicyManager(
|
| + const AccountId& account_id,
|
| + std::unique_ptr<CloudPolicyStore> store)
|
| + : account_id_(account_id),
|
| + store_(std::move(store)),
|
| + weak_ptr_factory_(this) {}
|
| +
|
| +UserActiveDirectoryPolicyManager::~UserActiveDirectoryPolicyManager() {}
|
| +
|
| +void UserActiveDirectoryPolicyManager::Init(SchemaRegistry* registry) {
|
| + ConfigurationPolicyProvider::Init(registry);
|
| +
|
| + store_->AddObserver(this);
|
| + if (!store_->is_initialized()) {
|
| + store_->Load();
|
| + }
|
| +
|
| + // Does nothing if |store_| hasn't yet initialized.
|
| + PublishPolicy();
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::Shutdown() {
|
| + store_->RemoveObserver(this);
|
| + ConfigurationPolicyProvider::Shutdown();
|
| +}
|
| +
|
| +bool UserActiveDirectoryPolicyManager::IsInitializationComplete(
|
| + PolicyDomain domain) const {
|
| + if (domain == POLICY_DOMAIN_CHROME)
|
| + return store_->is_initialized();
|
| + return true;
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::RefreshPolicies() {
|
| + chromeos::DBusThreadManager* thread_manager =
|
| + chromeos::DBusThreadManager::Get();
|
| + DCHECK(thread_manager);
|
| + chromeos::AuthPolicyClient* auth_policy_client =
|
| + thread_manager->GetAuthPolicyClient();
|
| + DCHECK(auth_policy_client);
|
| + auth_policy_client->RefreshUserPolicy(
|
| + account_id_,
|
| + base::Bind(&UserActiveDirectoryPolicyManager::OnPolicyRefreshed,
|
| + weak_ptr_factory_.GetWeakPtr()));
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::OnStoreLoaded(
|
| + CloudPolicyStore* cloud_policy_store) {
|
| + DCHECK_EQ(store_.get(), cloud_policy_store);
|
| + PublishPolicy();
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::OnStoreError(
|
| + CloudPolicyStore* cloud_policy_store) {
|
| + DCHECK_EQ(store_.get(), cloud_policy_store);
|
| + // Publish policy (even though it hasn't changed) in order to signal load
|
| + // complete on the ConfigurationPolicyProvider interface. Technically, this is
|
| + // only required on the first load, but doesn't hurt in any case.
|
| + PublishPolicy();
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::PublishPolicy() {
|
| + if (!store_->is_initialized()) {
|
| + return;
|
| + }
|
| + std::unique_ptr<PolicyBundle> bundle = base::MakeUnique<PolicyBundle>();
|
| + PolicyMap& policy_map =
|
| + bundle->Get(PolicyNamespace(POLICY_DOMAIN_CHROME, std::string()));
|
| + policy_map.CopyFrom(store_->policy_map());
|
| +
|
| + // Overwrite the source which is POLICY_SOURCE_CLOUD by default.
|
| + // TODO(tnagel): Rename CloudPolicyStore to PolicyStore and make the source
|
| + // configurable, then drop PolicyMap::SetSourceForAll().
|
| + policy_map.SetSourceForAll(POLICY_SOURCE_ACTIVE_DIRECTORY);
|
| + UpdatePolicy(std::move(bundle));
|
| +}
|
| +
|
| +void UserActiveDirectoryPolicyManager::OnPolicyRefreshed(bool success) {
|
| + if (!success) {
|
| + LOG(ERROR) << "Active Directory policy refresh failed.";
|
| + }
|
| + // Load independently of success or failure to keep up to date with whatever
|
| + // has happened on the authpolicyd / session manager side.
|
| + store_->Load();
|
| +}
|
| +
|
| +} // namespace policy
|
|
|