OLD | NEW |
| (Empty) |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
6 #define CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
7 | |
8 #include <string> | |
9 | |
10 #include "base/basictypes.h" | |
11 #include "base/memory/scoped_vector.h" | |
12 | |
13 class PrefChangeRegistrar; | |
14 class PrefRegistrySimple; | |
15 class PrefService; | |
16 class Profile; | |
17 | |
18 namespace user_prefs { | |
19 class PrefRegistrySyncable; | |
20 } | |
21 | |
22 namespace chromeos { | |
23 | |
24 class MultiProfileUserControllerDelegate; | |
25 class UserManager; | |
26 | |
27 // MultiProfileUserController decides whether a user is allowed to be in a | |
28 // multi-profiles session. It caches the multi-profile user behavior pref backed | |
29 // by user policy into local state so that the value is available before the | |
30 // user login and checks if the meaning of the value is respected. | |
31 class MultiProfileUserController { | |
32 public: | |
33 // Return value of IsUserAllowedInSession(). | |
34 enum UserAllowedInSessionResult { | |
35 // User is allowed in multi-profile session. | |
36 ALLOWED, | |
37 | |
38 // Owner of the device is not allowed to be added as a secondary user. | |
39 NOT_ALLOWED_OWNER_AS_SECONDARY, | |
40 | |
41 // Not allowed since it is potentially "tainted" with policy-pushed | |
42 // certificates. | |
43 NOT_ALLOWED_POLICY_CERT_TAINTED, | |
44 | |
45 // Not allowed since primary user is already "tainted" with policy-pushed | |
46 // certificates. | |
47 NOT_ALLOWED_PRIMARY_POLICY_CERT_TAINTED, | |
48 | |
49 // Not allowed since primary user policy forbids it to be part of | |
50 // multi-profiles session. | |
51 NOT_ALLOWED_PRIMARY_USER_POLICY_FORBIDS, | |
52 | |
53 // Not allowed since user policy forbids this user being part of | |
54 // multi-profiles session. Either 'primary-only' or 'not-allowed'. | |
55 NOT_ALLOWED_POLICY_FORBIDS | |
56 }; | |
57 | |
58 MultiProfileUserController(MultiProfileUserControllerDelegate* delegate, | |
59 PrefService* local_state); | |
60 ~MultiProfileUserController(); | |
61 | |
62 static void RegisterPrefs(PrefRegistrySimple* registry); | |
63 static void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry); | |
64 | |
65 // Returns the cached policy value for |user_email|. | |
66 std::string GetCachedValue(const std::string& user_email) const; | |
67 | |
68 // Returns UserAllowedInSessionResult enum that describe whether the user is | |
69 // allowed to be in the current session. | |
70 UserAllowedInSessionResult IsUserAllowedInSession( | |
71 const std::string& user_email) const; | |
72 | |
73 // Starts to observe the multiprofile user behavior pref of the given profile. | |
74 void StartObserving(Profile* user_profile); | |
75 | |
76 // Removes the cached values for the given user. | |
77 void RemoveCachedValues(const std::string& user_email); | |
78 | |
79 // Possible behavior values. | |
80 static const char kBehaviorUnrestricted[]; | |
81 static const char kBehaviorPrimaryOnly[]; | |
82 static const char kBehaviorNotAllowed[]; | |
83 | |
84 private: | |
85 friend class MultiProfileUserControllerTest; | |
86 | |
87 // Sets the cached policy value. | |
88 void SetCachedValue(const std::string& user_email, | |
89 const std::string& behavior); | |
90 | |
91 // Checks if all users are allowed in the current session. | |
92 void CheckSessionUsers(); | |
93 | |
94 // Invoked when user behavior pref value changes. | |
95 void OnUserPrefChanged(Profile* profile); | |
96 | |
97 MultiProfileUserControllerDelegate* delegate_; // Not owned. | |
98 PrefService* local_state_; // Not owned. | |
99 ScopedVector<PrefChangeRegistrar> pref_watchers_; | |
100 | |
101 DISALLOW_COPY_AND_ASSIGN(MultiProfileUserController); | |
102 }; | |
103 | |
104 } // namespace chromeos | |
105 | |
106 #endif // CHROME_BROWSER_CHROMEOS_LOGIN_MULTI_PROFILE_USER_CONTROLLER_H_ | |
OLD | NEW |