Get enrollment token from DMServer when an Active Directory user uses ARC

chrome/browser/chromeos/arc/arc_util.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/arc/arc_util.h"
 
 #include "base/logging.h"
 #include "chrome/browser/chromeos/login/user_flow.h"
 #include "chrome/browser/chromeos/login/users/chrome_user_manager.h"
 #include "chrome/browser/chromeos/profiles/profile_helper.h"
@@ skipping 37 matching lines @@
   if (profile->IsOffTheRecord()) {
     VLOG(1) << "Incognito profile is not supported in ARC.";
     return false;
   }
 
   if (profile->IsLegacySupervised()) {
     VLOG(1) << "Supervised users are not supported in ARC.";
     return false;
   }
 
-  // Do not allow for public session. Communicating with Play Store requires
-  // GAIA account. An exception is Kiosk mode, which uses different application
-  // install mechanism. cf) crbug.com/605545
+  // Play Store requires an appropriate application install mechanism. Normal
+  // users do this through GAIA, but Kiosk and Active Directory users use
+  // different application install mechanism. ARC is not allowed otherwise
+  // (e.g. in public sessions). cf) crbug.com/605545
   const user_manager::User* user =
       chromeos::ProfileHelper::Get()->GetUserByProfile(profile);
-  if ((!user || !user->HasGaiaAccount()) && !IsArcKioskMode()) {
+  const bool has_gaia_account = user && user->HasGaiaAccount();
+  const bool is_arc_active_directory_user =
+      user && user->IsActiveDirectoryUser() &&
+      IsArcAllowedForActiveDirectoryUsers();
+  if (!has_gaia_account && !is_arc_active_directory_user && !IsArcKioskMode()) {
     VLOG(1) << "Users without GAIA accounts are not supported in ARC.";
     return false;
   }
 
   // Do not run ARC instance when supervised user is being created.
   // Otherwise noisy notification may be displayed.
   chromeos::UserFlow* user_flow =
       chromeos::ChromeUserManager::Get()->GetUserFlow(user->GetAccountId());
   if (!user_flow || !user_flow->CanStartArc()) {
     VLOG(1) << "ARC is not allowed in the current user flow.";
     return false;
   }
 
   // Do not allow for Ephemeral data user. cf) b/26402681
   if (user_manager::UserManager::Get()
           ->IsCurrentUserCryptohomeDataEphemeral()) {
     VLOG(1) << "Users with ephemeral data are not supported in ARC.";
     return false;
   }
 
   return true;
 }
 
 void DisallowArcForTesting() {
   g_disallow_for_testing = true;
 }
 
 }  // namespace arc