| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
| 6 #define CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
| 7 | |
| 8 #include <string> | |
| 9 | |
| 10 #include "base/basictypes.h" | |
| 11 #include "base/memory/scoped_vector.h" | |
| 12 | |
| 13 class PrefChangeRegistrar; | |
| 14 class PrefRegistrySimple; | |
| 15 class PrefService; | |
| 16 class Profile; | |
| 17 | |
| 18 namespace user_prefs { | |
| 19 class PrefRegistrySyncable; | |
| 20 } | |
| 21 | |
| 22 namespace chromeos { | |
| 23 | |
| 24 class MultiProfileUserControllerDelegate; | |
| 25 class UserManager; | |
| 26 | |
| 27 // MultiProfileUserController decides whether a user is allowed to be in a | |
| 28 // multi-profiles session. It caches the multi-profile user behavior pref backed | |
| 29 // by user policy into local state so that the value is available before the | |
| 30 // user login and checks if the meaning of the value is respected. | |
| 31 class MultiProfileUserController { | |
| 32 public: | |
| 33 // Return value of IsUserAllowedInSession(). | |
| 34 enum UserAllowedInSessionResult { | |
| 35 // User is allowed in multi-profile session. | |
| 36 ALLOWED, | |
| 37 | |
| 38 // Owner of the device is not allowed to be added as a secondary user. | |
| 39 NOT_ALLOWED_OWNER_AS_SECONDARY, | |
| 40 | |
| 41 // Not allowed since it is potentially "tainted" with policy-pushed | |
| 42 // certificates. | |
| 43 NOT_ALLOWED_POLICY_CERT_TAINTED, | |
| 44 | |
| 45 // Not allowed since primary user is already "tainted" with policy-pushed | |
| 46 // certificates. | |
| 47 NOT_ALLOWED_PRIMARY_POLICY_CERT_TAINTED, | |
| 48 | |
| 49 // Not allowed since primary user policy forbids it to be part of | |
| 50 // multi-profiles session. | |
| 51 NOT_ALLOWED_PRIMARY_USER_POLICY_FORBIDS, | |
| 52 | |
| 53 // Not allowed since user policy forbids this user being part of | |
| 54 // multi-profiles session. Either 'primary-only' or 'not-allowed'. | |
| 55 NOT_ALLOWED_POLICY_FORBIDS | |
| 56 }; | |
| 57 | |
| 58 MultiProfileUserController(MultiProfileUserControllerDelegate* delegate, | |
| 59 PrefService* local_state); | |
| 60 ~MultiProfileUserController(); | |
| 61 | |
| 62 static void RegisterPrefs(PrefRegistrySimple* registry); | |
| 63 static void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry); | |
| 64 | |
| 65 // Returns the cached policy value for |user_email|. | |
| 66 std::string GetCachedValue(const std::string& user_email) const; | |
| 67 | |
| 68 // Returns UserAllowedInSessionResult enum that describe whether the user is | |
| 69 // allowed to be in the current session. | |
| 70 UserAllowedInSessionResult IsUserAllowedInSession( | |
| 71 const std::string& user_email) const; | |
| 72 | |
| 73 // Starts to observe the multiprofile user behavior pref of the given profile. | |
| 74 void StartObserving(Profile* user_profile); | |
| 75 | |
| 76 // Removes the cached values for the given user. | |
| 77 void RemoveCachedValues(const std::string& user_email); | |
| 78 | |
| 79 // Possible behavior values. | |
| 80 static const char kBehaviorUnrestricted[]; | |
| 81 static const char kBehaviorPrimaryOnly[]; | |
| 82 static const char kBehaviorNotAllowed[]; | |
| 83 | |
| 84 private: | |
| 85 friend class MultiProfileUserControllerTest; | |
| 86 | |
| 87 // Sets the cached policy value. | |
| 88 void SetCachedValue(const std::string& user_email, | |
| 89 const std::string& behavior); | |
| 90 | |
| 91 // Checks if all users are allowed in the current session. | |
| 92 void CheckSessionUsers(); | |
| 93 | |
| 94 // Invoked when user behavior pref value changes. | |
| 95 void OnUserPrefChanged(Profile* profile); | |
| 96 | |
| 97 MultiProfileUserControllerDelegate* delegate_; // Not owned. | |
| 98 PrefService* local_state_; // Not owned. | |
| 99 ScopedVector<PrefChangeRegistrar> pref_watchers_; | |
| 100 | |
| 101 DISALLOW_COPY_AND_ASSIGN(MultiProfileUserController); | |
| 102 }; | |
| 103 | |
| 104 } // namespace chromeos | |
| 105 | |
| 106 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
| OLD | NEW |