Index: trunk/src/chrome/browser/chromeos/policy/device_local_account_policy_service.cc |
=================================================================== |
--- trunk/src/chrome/browser/chromeos/policy/device_local_account_policy_service.cc (revision 229896) |
+++ trunk/src/chrome/browser/chromeos/policy/device_local_account_policy_service.cc (working copy) |
@@ -7,24 +7,18 @@ |
#include <vector> |
#include "base/bind.h" |
-#include "base/file_util.h" |
-#include "base/files/file_enumerator.h" |
-#include "base/files/file_path.h" |
#include "base/logging.h" |
#include "base/message_loop/message_loop.h" |
#include "base/message_loop/message_loop_proxy.h" |
-#include "base/path_service.h" |
-#include "base/sequenced_task_runner.h" |
-#include "base/strings/string_number_conversions.h" |
#include "chrome/browser/chromeos/policy/device_local_account.h" |
#include "chrome/browser/chromeos/policy/device_local_account_policy_store.h" |
+#include "chrome/browser/chromeos/settings/cros_settings.h" |
#include "chrome/browser/chromeos/settings/device_settings_service.h" |
#include "chrome/browser/policy/cloud/cloud_policy_client.h" |
#include "chrome/browser/policy/cloud/cloud_policy_constants.h" |
#include "chrome/browser/policy/cloud/cloud_policy_refresh_scheduler.h" |
#include "chrome/browser/policy/cloud/device_management_service.h" |
#include "chrome/browser/policy/proto/cloud/device_management_backend.pb.h" |
-#include "chromeos/chromeos_paths.h" |
#include "chromeos/dbus/session_manager_client.h" |
#include "chromeos/settings/cros_settings_names.h" |
#include "chromeos/settings/cros_settings_provider.h" |
@@ -59,86 +53,23 @@ |
return client.Pass(); |
} |
-// Get the subdirectory of the cache directory in which force-installed |
-// extensions are cached for |account_id|. |
-std::string GetCacheSubdirectoryForAccountID(const std::string& account_id) { |
- return base::HexEncode(account_id.c_str(), account_id.size()); |
-} |
- |
-// Cleans up the cache directory by removing subdirectories that are not found |
-// in |subdirectories_to_keep|. Only caches whose cache directory is found in |
-// |subdirectories_to_keep| may be running while the clean-up is in progress. |
-void DeleteOrphanedExtensionCaches( |
- const std::set<std::string>& subdirectories_to_keep) { |
- base::FilePath cache_root_dir; |
- CHECK(PathService::Get(chromeos::DIR_DEVICE_LOCAL_ACCOUNT_CACHE, |
- &cache_root_dir)); |
- base::FileEnumerator enumerator(cache_root_dir, |
- false, |
- base::FileEnumerator::DIRECTORIES); |
- for (base::FilePath path = enumerator.Next(); !path.empty(); |
- path = enumerator.Next()) { |
- const std::string subdirectory(path.BaseName().MaybeAsASCII()); |
- if (subdirectories_to_keep.find(subdirectory) == |
- subdirectories_to_keep.end()) { |
- base::DeleteFile(path, true); |
- } |
- } |
-} |
- |
-// Removes the subdirectory belonging to |account_id_to_delete| from the cache |
-// directory. No cache belonging to |account_id_to_delete| may be running while |
-// the removal is in progress. |
-void DeleteObsoleteExtensionCache(const std::string& account_id_to_delete) { |
- base::FilePath cache_root_dir; |
- CHECK(PathService::Get(chromeos::DIR_DEVICE_LOCAL_ACCOUNT_CACHE, |
- &cache_root_dir)); |
- const base::FilePath path = cache_root_dir |
- .Append(GetCacheSubdirectoryForAccountID(account_id_to_delete)); |
- if (base::DirectoryExists(path)) |
- base::DeleteFile(path, true); |
-} |
- |
} // namespace |
DeviceLocalAccountPolicyBroker::DeviceLocalAccountPolicyBroker( |
- const DeviceLocalAccount& account, |
+ const std::string& user_id, |
scoped_ptr<DeviceLocalAccountPolicyStore> store, |
const scoped_refptr<base::SequencedTaskRunner>& task_runner) |
- : account_id_(account.account_id), |
- user_id_(account.user_id), |
+ : user_id_(user_id), |
store_(store.Pass()), |
core_(PolicyNamespaceKey(dm_protocol::kChromePublicAccountPolicyType, |
store_->account_id()), |
store_.get(), |
- task_runner) { |
- base::FilePath cache_root_dir; |
- CHECK(PathService::Get(chromeos::DIR_DEVICE_LOCAL_ACCOUNT_CACHE, |
- &cache_root_dir)); |
- extension_loader_ = new chromeos::DeviceLocalAccountExternalPolicyLoader( |
- store_.get(), |
- cache_root_dir.Append( |
- GetCacheSubdirectoryForAccountID(account.account_id))); |
-} |
+ task_runner) {} |
-DeviceLocalAccountPolicyBroker::~DeviceLocalAccountPolicyBroker() { |
-} |
+DeviceLocalAccountPolicyBroker::~DeviceLocalAccountPolicyBroker() {} |
-void DeviceLocalAccountPolicyBroker::Initialize() { |
- store_->Load(); |
-} |
- |
-void DeviceLocalAccountPolicyBroker::ConnectIfPossible( |
- chromeos::DeviceSettingsService* device_settings_service, |
- DeviceManagementService* device_management_service) { |
- if (core_.client()) |
- return; |
- |
- scoped_ptr<CloudPolicyClient> client(CreateClient(device_settings_service, |
- device_management_service)); |
- if (!client) |
- return; |
- |
+void DeviceLocalAccountPolicyBroker::Connect( |
+ scoped_ptr<CloudPolicyClient> client) { |
core_.Connect(client.Pass()); |
core_.StartRefreshScheduler(); |
UpdateRefreshDelay(); |
@@ -167,26 +98,66 @@ |
return display_name; |
} |
+DeviceLocalAccountPolicyService::PolicyBrokerWrapper::PolicyBrokerWrapper() |
+ : parent(NULL), broker(NULL) {} |
+ |
+DeviceLocalAccountPolicyService::PolicyBrokerWrapper::~PolicyBrokerWrapper() {} |
+ |
+DeviceLocalAccountPolicyBroker* |
+ DeviceLocalAccountPolicyService::PolicyBrokerWrapper::GetBroker() { |
+ if (!broker) { |
+ scoped_ptr<DeviceLocalAccountPolicyStore> store( |
+ new DeviceLocalAccountPolicyStore(account_id, |
+ parent->session_manager_client_, |
+ parent->device_settings_service_, |
+ parent->background_task_runner_)); |
+ broker = new DeviceLocalAccountPolicyBroker( |
+ user_id, store.Pass(), base::MessageLoopProxy::current()); |
+ broker->core()->store()->AddObserver(parent); |
+ broker->core()->store()->Load(); |
+ } |
+ return broker; |
+} |
+ |
+void DeviceLocalAccountPolicyService::PolicyBrokerWrapper::ConnectIfPossible() { |
+ if (broker && broker->core()->client()) |
+ return; |
+ scoped_ptr<CloudPolicyClient> client(CreateClient( |
+ parent->device_settings_service_, |
+ parent->device_management_service_)); |
+ if (client) |
+ GetBroker()->Connect(client.Pass()); |
+} |
+ |
+void DeviceLocalAccountPolicyService::PolicyBrokerWrapper::Disconnect() { |
+ if (broker) |
+ broker->Disconnect(); |
+} |
+ |
+void DeviceLocalAccountPolicyService::PolicyBrokerWrapper::DeleteBroker() { |
+ if (!broker) |
+ return; |
+ broker->core()->store()->RemoveObserver(parent); |
+ delete broker; |
+ broker = NULL; |
+} |
+ |
DeviceLocalAccountPolicyService::DeviceLocalAccountPolicyService( |
chromeos::SessionManagerClient* session_manager_client, |
chromeos::DeviceSettingsService* device_settings_service, |
chromeos::CrosSettings* cros_settings, |
- scoped_refptr<base::SequencedTaskRunner> store_background_task_runner, |
- scoped_refptr<base::SequencedTaskRunner> extension_cache_task_runner) |
+ scoped_refptr<base::SequencedTaskRunner> background_task_runner) |
: session_manager_client_(session_manager_client), |
device_settings_service_(device_settings_service), |
cros_settings_(cros_settings), |
device_management_service_(NULL), |
- waiting_for_cros_settings_(false), |
- orphan_cache_deletion_state_(NOT_STARTED), |
- store_background_task_runner_(store_background_task_runner), |
- extension_cache_task_runner_(extension_cache_task_runner), |
- local_accounts_subscription_(cros_settings_->AddSettingsObserver( |
- chromeos::kAccountsPrefDeviceLocalAccounts, |
- base::Bind(&DeviceLocalAccountPolicyService:: |
- UpdateAccountListIfNonePending, |
- base::Unretained(this)))), |
- weak_factory_(this) { |
+ background_task_runner_(background_task_runner), |
+ cros_settings_callback_factory_(this) { |
+ local_accounts_subscription_ = cros_settings_->AddSettingsObserver( |
+ chromeos::kAccountsPrefDeviceLocalAccounts, |
+ base::Bind(&DeviceLocalAccountPolicyService:: |
+ UpdateAccountListIfNonePending, |
+ base::Unretained(this))); |
UpdateAccountList(); |
} |
@@ -202,8 +173,7 @@ |
// Connect the brokers. |
for (PolicyBrokerMap::iterator it(policy_brokers_.begin()); |
it != policy_brokers_.end(); ++it) { |
- it->second->ConnectIfPossible(device_settings_service_, |
- device_management_service_); |
+ it->second.ConnectIfPossible(); |
} |
} |
@@ -214,7 +184,7 @@ |
// Disconnect the brokers. |
for (PolicyBrokerMap::iterator it(policy_brokers_.begin()); |
it != policy_brokers_.end(); ++it) { |
- it->second->Disconnect(); |
+ it->second.Disconnect(); |
} |
} |
@@ -225,7 +195,7 @@ |
if (entry == policy_brokers_.end()) |
return NULL; |
- return entry->second; |
+ return entry->second.GetBroker(); |
} |
bool DeviceLocalAccountPolicyService::IsPolicyAvailableForUser( |
@@ -259,214 +229,52 @@ |
FOR_EACH_OBSERVER(Observer, observers_, OnPolicyUpdated(broker->user_id())); |
} |
-bool DeviceLocalAccountPolicyService::IsExtensionCacheDirectoryBusy( |
- const std::string& account_id) { |
- return busy_extension_cache_directories_.find(account_id) != |
- busy_extension_cache_directories_.end(); |
-} |
- |
-void DeviceLocalAccountPolicyService::StartExtensionCachesIfPossible() { |
- for (PolicyBrokerMap::iterator it = policy_brokers_.begin(); |
- it != policy_brokers_.end(); ++it) { |
- if (!it->second->extension_loader()->IsCacheRunning() && |
- !IsExtensionCacheDirectoryBusy(it->second->account_id())) { |
- it->second->extension_loader()->StartCache(extension_cache_task_runner_); |
- } |
- } |
-} |
- |
-bool DeviceLocalAccountPolicyService::StartExtensionCacheForAccountIfPresent( |
- const std::string& account_id) { |
- for (PolicyBrokerMap::iterator it = policy_brokers_.begin(); |
- it != policy_brokers_.end(); ++it) { |
- if (it->second->account_id() == account_id) { |
- DCHECK(!it->second->extension_loader()->IsCacheRunning()); |
- it->second->extension_loader()->StartCache(extension_cache_task_runner_); |
- return true; |
- } |
- } |
- return false; |
-} |
- |
-void DeviceLocalAccountPolicyService::OnOrphanedExtensionCachesDeleted() { |
- DCHECK_EQ(IN_PROGRESS, orphan_cache_deletion_state_); |
- |
- orphan_cache_deletion_state_ = DONE; |
- StartExtensionCachesIfPossible(); |
-} |
- |
-void DeviceLocalAccountPolicyService::OnObsoleteExtensionCacheShutdown( |
- const std::string& account_id) { |
- DCHECK_NE(NOT_STARTED, orphan_cache_deletion_state_); |
- DCHECK(IsExtensionCacheDirectoryBusy(account_id)); |
- |
- // The account with |account_id| was deleted and the broker for it has shut |
- // down completely. |
- |
- if (StartExtensionCacheForAccountIfPresent(account_id)) { |
- // If another account with the same ID was created in the meantime, its |
- // extension cache is started, reusing the cache directory. The directory no |
- // longer needs to be marked as busy in this case. |
- busy_extension_cache_directories_.erase(account_id); |
- return; |
- } |
- |
- // If no account with |account_id| exists anymore, the cache directory should |
- // be removed. The directory must stay marked as busy while the removal is in |
- // progress. |
- extension_cache_task_runner_->PostTaskAndReply( |
- FROM_HERE, |
- base::Bind(&DeleteObsoleteExtensionCache, account_id), |
- base::Bind(&DeviceLocalAccountPolicyService:: |
- OnObsoleteExtensionCacheDeleted, |
- weak_factory_.GetWeakPtr(), |
- account_id)); |
-} |
- |
-void DeviceLocalAccountPolicyService::OnObsoleteExtensionCacheDeleted( |
- const std::string& account_id) { |
- DCHECK_EQ(DONE, orphan_cache_deletion_state_); |
- DCHECK(IsExtensionCacheDirectoryBusy(account_id)); |
- |
- // The cache directory for |account_id| has been deleted. The directory no |
- // longer needs to be marked as busy. |
- busy_extension_cache_directories_.erase(account_id); |
- |
- // If another account with the same ID was created in the meantime, start its |
- // extension cache, creating a new cache directory. |
- StartExtensionCacheForAccountIfPresent(account_id); |
-} |
- |
void DeviceLocalAccountPolicyService::UpdateAccountListIfNonePending() { |
// Avoid unnecessary calls to UpdateAccountList(): If an earlier call is still |
// pending (because the |cros_settings_| are not trusted yet), the updated |
// account list will be processed by that call when it eventually runs. |
- if (!waiting_for_cros_settings_) |
+ if (!cros_settings_callback_factory_.HasWeakPtrs()) |
UpdateAccountList(); |
} |
void DeviceLocalAccountPolicyService::UpdateAccountList() { |
- chromeos::CrosSettingsProvider::TrustedStatus status = |
- cros_settings_->PrepareTrustedValues( |
- base::Bind(&DeviceLocalAccountPolicyService::UpdateAccountList, |
- weak_factory_.GetWeakPtr())); |
- switch (status) { |
- case chromeos::CrosSettingsProvider::TRUSTED: |
- waiting_for_cros_settings_ = false; |
- break; |
- case chromeos::CrosSettingsProvider::TEMPORARILY_UNTRUSTED: |
- waiting_for_cros_settings_ = true; |
- return; |
- case chromeos::CrosSettingsProvider::PERMANENTLY_UNTRUSTED: |
- waiting_for_cros_settings_ = false; |
- return; |
+ if (chromeos::CrosSettingsProvider::TRUSTED != |
+ cros_settings_->PrepareTrustedValues( |
+ base::Bind(&DeviceLocalAccountPolicyService::UpdateAccountList, |
+ cros_settings_callback_factory_.GetWeakPtr()))) { |
+ return; |
} |
// Update |policy_brokers_|, keeping existing entries. |
PolicyBrokerMap old_policy_brokers; |
policy_brokers_.swap(old_policy_brokers); |
- std::set<std::string> subdirectories_to_keep; |
const std::vector<DeviceLocalAccount> device_local_accounts = |
GetDeviceLocalAccounts(cros_settings_); |
for (std::vector<DeviceLocalAccount>::const_iterator it = |
device_local_accounts.begin(); |
it != device_local_accounts.end(); ++it) { |
- PolicyBrokerMap::iterator broker_it = old_policy_brokers.find(it->user_id); |
+ PolicyBrokerWrapper& wrapper = policy_brokers_[it->user_id]; |
+ wrapper.user_id = it->user_id; |
+ wrapper.account_id = it->account_id; |
+ wrapper.parent = this; |
- scoped_ptr<DeviceLocalAccountPolicyBroker> broker; |
- bool broker_initialized = false; |
- if (broker_it != old_policy_brokers.end()) { |
- // Reuse the existing broker if present. |
- broker.reset(broker_it->second); |
- old_policy_brokers.erase(broker_it); |
- broker_initialized = true; |
- } else { |
- scoped_ptr<DeviceLocalAccountPolicyStore> store( |
- new DeviceLocalAccountPolicyStore(it->account_id, |
- session_manager_client_, |
- device_settings_service_, |
- store_background_task_runner_)); |
- store->AddObserver(this); |
- broker.reset(new DeviceLocalAccountPolicyBroker( |
- *it, |
- store.Pass(), |
- base::MessageLoopProxy::current())); |
- } |
+ // Reuse the existing broker if present. |
+ PolicyBrokerWrapper& existing_wrapper = old_policy_brokers[it->user_id]; |
+ wrapper.broker = existing_wrapper.broker; |
+ existing_wrapper.broker = NULL; |
// Fire up the cloud connection for fetching policy for the account from |
// the cloud if this is an enterprise-managed device. |
- broker->ConnectIfPossible(device_settings_service_, |
- device_management_service_); |
- |
- policy_brokers_[it->user_id] = broker.release(); |
- if (!broker_initialized) { |
- // The broker must be initialized after it has been added to |
- // |policy_brokers_|. |
- policy_brokers_[it->user_id]->Initialize(); |
- } |
- |
- if (orphan_cache_deletion_state_ == NOT_STARTED) { |
- subdirectories_to_keep.insert( |
- GetCacheSubdirectoryForAccountID(it->account_id)); |
- } |
+ wrapper.ConnectIfPossible(); |
} |
+ DeleteBrokers(&old_policy_brokers); |
- std::set<std::string> obsolete_account_ids; |
- for (PolicyBrokerMap::const_iterator it = old_policy_brokers.begin(); |
- it != old_policy_brokers.end(); ++it) { |
- obsolete_account_ids.insert(it->second->account_id()); |
- } |
- |
- if (orphan_cache_deletion_state_ == NOT_STARTED) { |
- DCHECK(old_policy_brokers.empty()); |
- DCHECK(busy_extension_cache_directories_.empty()); |
- |
- // If this method is running for the first time, no extension caches have |
- // been started yet. Take this opportunity to do a clean-up by removing |
- // orphaned cache directories not found in |subdirectories_to_keep| from the |
- // cache directory. |
- orphan_cache_deletion_state_ = IN_PROGRESS; |
- extension_cache_task_runner_->PostTaskAndReply( |
- FROM_HERE, |
- base::Bind(&DeleteOrphanedExtensionCaches, subdirectories_to_keep), |
- base::Bind(&DeviceLocalAccountPolicyService:: |
- OnOrphanedExtensionCachesDeleted, |
- weak_factory_.GetWeakPtr())); |
- |
- // Start the extension caches for all brokers. These belong to accounts in |
- // |account_ids| and are not affected by the clean-up. |
- StartExtensionCachesIfPossible(); |
- } else { |
- // If this method has run before, obsolete brokers may exist. Shut down |
- // their extension caches and delete the brokers. |
- DeleteBrokers(&old_policy_brokers); |
- |
- if (orphan_cache_deletion_state_ == DONE) { |
- // If the initial clean-up of orphaned cache directories has been |
- // complete, start any extension caches that are not running yet but can |
- // be started now because their cache directories are not busy. |
- StartExtensionCachesIfPossible(); |
- } |
- } |
- |
FOR_EACH_OBSERVER(Observer, observers_, OnDeviceLocalAccountsChanged()); |
} |
void DeviceLocalAccountPolicyService::DeleteBrokers(PolicyBrokerMap* map) { |
- for (PolicyBrokerMap::iterator it = map->begin(); it != map->end(); ++it) { |
- it->second->core()->store()->RemoveObserver(this); |
- scoped_refptr<chromeos::DeviceLocalAccountExternalPolicyLoader> |
- extension_loader = it->second->extension_loader(); |
- if (extension_loader->IsCacheRunning()) { |
- DCHECK(!IsExtensionCacheDirectoryBusy(it->second->account_id())); |
- busy_extension_cache_directories_.insert(it->second->account_id()); |
- extension_loader->StopCache(base::Bind( |
- &DeviceLocalAccountPolicyService::OnObsoleteExtensionCacheShutdown, |
- weak_factory_.GetWeakPtr(), |
- it->second->account_id())); |
- } |
- delete it->second; |
- } |
+ for (PolicyBrokerMap::iterator it = map->begin(); it != map->end(); ++it) |
+ it->second.DeleteBroker(); |
map->clear(); |
} |
@@ -475,8 +283,8 @@ |
CloudPolicyStore* store) { |
for (PolicyBrokerMap::iterator it(policy_brokers_.begin()); |
it != policy_brokers_.end(); ++it) { |
- if (it->second->core()->store() == store) |
- return it->second; |
+ if (it->second.broker && it->second.broker->core()->store() == store) |
+ return it->second.broker; |
} |
return NULL; |
} |