| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/chromeos/login/users/supervised_user_manager_impl.h" | 5 #include "chrome/browser/chromeos/login/users/supervised_user_manager_impl.h" |
| 6 | 6 |
| 7 #include "base/file_util.h" | 7 #include "base/file_util.h" |
| 8 #include "base/files/file_path.h" | 8 #include "base/files/file_path.h" |
| 9 #include "base/prefs/pref_registry_simple.h" | 9 #include "base/prefs/pref_registry_simple.h" |
| 10 #include "base/prefs/pref_service.h" | 10 #include "base/prefs/pref_service.h" |
| 11 #include "base/prefs/scoped_user_pref_update.h" | 11 #include "base/prefs/scoped_user_pref_update.h" |
| 12 #include "base/strings/string_util.h" | 12 #include "base/strings/string_util.h" |
| 13 #include "base/strings/stringprintf.h" | 13 #include "base/strings/stringprintf.h" |
| 14 #include "base/strings/utf_string_conversions.h" | 14 #include "base/strings/utf_string_conversions.h" |
| 15 #include "base/threading/sequenced_worker_pool.h" | 15 #include "base/threading/sequenced_worker_pool.h" |
| 16 #include "base/values.h" | 16 #include "base/values.h" |
| 17 #include "chrome/browser/browser_process.h" | 17 #include "chrome/browser/browser_process.h" |
| 18 #include "chrome/browser/chromeos/login/managed/locally_managed_user_constants.h
" | 18 #include "chrome/browser/chromeos/login/managed/locally_managed_user_constants.h
" |
| 19 #include "chrome/browser/chromeos/login/managed/supervised_user_authentication.h
" | 19 #include "chrome/browser/chromeos/login/managed/supervised_user_authentication.h
" |
| 20 #include "chrome/browser/chromeos/login/users/user_manager_impl.h" | 20 #include "chrome/browser/chromeos/login/users/user_manager_impl.h" |
| 21 #include "chrome/browser/chromeos/profiles/profile_helper.h" | 21 #include "chrome/browser/chromeos/profiles/profile_helper.h" |
| 22 #include "chrome/browser/managed_mode/managed_user_service.h" | 22 #include "chrome/browser/supervised_user/supervised_user_service.h" |
| 23 #include "chrome/browser/managed_mode/managed_user_service_factory.h" | 23 #include "chrome/browser/supervised_user/supervised_user_service_factory.h" |
| 24 #include "chromeos/settings/cros_settings_names.h" | 24 #include "chromeos/settings/cros_settings_names.h" |
| 25 #include "content/public/browser/browser_thread.h" | 25 #include "content/public/browser/browser_thread.h" |
| 26 #include "google_apis/gaia/gaia_auth_util.h" | 26 #include "google_apis/gaia/gaia_auth_util.h" |
| 27 | 27 |
| 28 using content::BrowserThread; | 28 using content::BrowserThread; |
| 29 | 29 |
| 30 namespace { | 30 namespace { |
| 31 | 31 |
| 32 // Names for pref keys in Local State. | 32 // Names for pref keys in Local State. |
| 33 // A map from locally managed user local user id to sync user id. | 33 // A map from locally managed user local user id to sync user id. |
| 34 const char kManagedUserSyncId[] = | 34 const char kSupervisedUserSyncId[] = |
| 35 "ManagedUserSyncId"; | 35 "ManagedUserSyncId"; |
| 36 | 36 |
| 37 // A map from locally managed user id to manager user id. | 37 // A map from locally managed user id to manager user id. |
| 38 const char kManagedUserManagers[] = | 38 const char kSupervisedUserManagers[] = |
| 39 "ManagedUserManagers"; | 39 "ManagedUserManagers"; |
| 40 | 40 |
| 41 // A map from locally managed user id to manager display name. | 41 // A map from locally managed user id to manager display name. |
| 42 const char kManagedUserManagerNames[] = | 42 const char kSupervisedUserManagerNames[] = |
| 43 "ManagedUserManagerNames"; | 43 "ManagedUserManagerNames"; |
| 44 | 44 |
| 45 // A map from locally managed user id to manager display e-mail. | 45 // A map from locally managed user id to manager display e-mail. |
| 46 const char kManagedUserManagerDisplayEmails[] = | 46 const char kSupervisedUserManagerDisplayEmails[] = |
| 47 "ManagedUserManagerDisplayEmails"; | 47 "ManagedUserManagerDisplayEmails"; |
| 48 | 48 |
| 49 // A vector pref of the locally managed accounts defined on this device, that | 49 // A vector pref of the locally managed accounts defined on this device, that |
| 50 // had not logged in yet. | 50 // had not logged in yet. |
| 51 const char kLocallyManagedUsersFirstRun[] = "LocallyManagedUsersFirstRun"; | 51 const char kLocallyManagedUsersFirstRun[] = "LocallyManagedUsersFirstRun"; |
| 52 | 52 |
| 53 // A pref of the next id for locally managed users generation. | 53 // A pref of the next id for locally managed users generation. |
| 54 const char kLocallyManagedUsersNextId[] = | 54 const char kLocallyManagedUsersNextId[] = |
| 55 "LocallyManagedUsersNextId"; | 55 "LocallyManagedUsersNextId"; |
| 56 | 56 |
| (...skipping 22 matching lines...) Expand all Loading... |
| 79 const char kSupervisedUserNeedPasswordUpdate[] = | 79 const char kSupervisedUserNeedPasswordUpdate[] = |
| 80 "SupervisedUserNeedPasswordUpdate"; | 80 "SupervisedUserNeedPasswordUpdate"; |
| 81 | 81 |
| 82 // A map from user id to flag indicating if cryptohome does not have signature | 82 // A map from user id to flag indicating if cryptohome does not have signature |
| 83 // key. | 83 // key. |
| 84 const char kSupervisedUserIncompleteKey[] = "SupervisedUserHasIncompleteKey"; | 84 const char kSupervisedUserIncompleteKey[] = "SupervisedUserHasIncompleteKey"; |
| 85 | 85 |
| 86 std::string LoadSyncToken(base::FilePath profile_dir) { | 86 std::string LoadSyncToken(base::FilePath profile_dir) { |
| 87 std::string token; | 87 std::string token; |
| 88 base::FilePath token_file = | 88 base::FilePath token_file = |
| 89 profile_dir.Append(chromeos::kManagedUserTokenFilename); | 89 profile_dir.Append(chromeos::kSupervisedUserTokenFilename); |
| 90 VLOG(1) << "Loading" << token_file.value(); | 90 VLOG(1) << "Loading" << token_file.value(); |
| 91 if (!base::ReadFileToString(token_file, &token)) | 91 if (!base::ReadFileToString(token_file, &token)) |
| 92 return std::string(); | 92 return std::string(); |
| 93 return token; | 93 return token; |
| 94 } | 94 } |
| 95 | 95 |
| 96 } // namespace | 96 } // namespace |
| 97 | 97 |
| 98 namespace chromeos { | 98 namespace chromeos { |
| 99 | 99 |
| (...skipping 11 matching lines...) Expand all Loading... |
| 111 const int kMinPasswordRevision = 1; | 111 const int kMinPasswordRevision = 1; |
| 112 | 112 |
| 113 // static | 113 // static |
| 114 void SupervisedUserManager::RegisterPrefs(PrefRegistrySimple* registry) { | 114 void SupervisedUserManager::RegisterPrefs(PrefRegistrySimple* registry) { |
| 115 registry->RegisterListPref(kLocallyManagedUsersFirstRun); | 115 registry->RegisterListPref(kLocallyManagedUsersFirstRun); |
| 116 registry->RegisterIntegerPref(kLocallyManagedUsersNextId, 0); | 116 registry->RegisterIntegerPref(kLocallyManagedUsersNextId, 0); |
| 117 registry->RegisterStringPref( | 117 registry->RegisterStringPref( |
| 118 kLocallyManagedUserCreationTransactionDisplayName, ""); | 118 kLocallyManagedUserCreationTransactionDisplayName, ""); |
| 119 registry->RegisterStringPref( | 119 registry->RegisterStringPref( |
| 120 kLocallyManagedUserCreationTransactionUserId, ""); | 120 kLocallyManagedUserCreationTransactionUserId, ""); |
| 121 registry->RegisterDictionaryPref(kManagedUserSyncId); | 121 registry->RegisterDictionaryPref(kSupervisedUserSyncId); |
| 122 registry->RegisterDictionaryPref(kManagedUserManagers); | 122 registry->RegisterDictionaryPref(kSupervisedUserManagers); |
| 123 registry->RegisterDictionaryPref(kManagedUserManagerNames); | 123 registry->RegisterDictionaryPref(kSupervisedUserManagerNames); |
| 124 registry->RegisterDictionaryPref(kManagedUserManagerDisplayEmails); | 124 registry->RegisterDictionaryPref(kSupervisedUserManagerDisplayEmails); |
| 125 | 125 |
| 126 registry->RegisterDictionaryPref(kSupervisedUserPasswordSchema); | 126 registry->RegisterDictionaryPref(kSupervisedUserPasswordSchema); |
| 127 registry->RegisterDictionaryPref(kSupervisedUserPasswordSalt); | 127 registry->RegisterDictionaryPref(kSupervisedUserPasswordSalt); |
| 128 registry->RegisterDictionaryPref(kSupervisedUserPasswordRevision); | 128 registry->RegisterDictionaryPref(kSupervisedUserPasswordRevision); |
| 129 | 129 |
| 130 registry->RegisterDictionaryPref(kSupervisedUserNeedPasswordUpdate); | 130 registry->RegisterDictionaryPref(kSupervisedUserNeedPasswordUpdate); |
| 131 registry->RegisterDictionaryPref(kSupervisedUserIncompleteKey); | 131 registry->RegisterDictionaryPref(kSupervisedUserIncompleteKey); |
| 132 } | 132 } |
| 133 | 133 |
| 134 SupervisedUserManagerImpl::SupervisedUserManagerImpl(UserManagerImpl* owner) | 134 SupervisedUserManagerImpl::SupervisedUserManagerImpl(UserManagerImpl* owner) |
| (...skipping 55 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 190 CHECK(manager); | 190 CHECK(manager); |
| 191 | 191 |
| 192 PrefService* local_state = g_browser_process->local_state(); | 192 PrefService* local_state = g_browser_process->local_state(); |
| 193 | 193 |
| 194 User* new_user = User::CreateLocallyManagedUser(local_user_id); | 194 User* new_user = User::CreateLocallyManagedUser(local_user_id); |
| 195 | 195 |
| 196 owner_->AddUserRecord(new_user); | 196 owner_->AddUserRecord(new_user); |
| 197 | 197 |
| 198 ListPrefUpdate prefs_new_users_update(local_state, | 198 ListPrefUpdate prefs_new_users_update(local_state, |
| 199 kLocallyManagedUsersFirstRun); | 199 kLocallyManagedUsersFirstRun); |
| 200 DictionaryPrefUpdate sync_id_update(local_state, kManagedUserSyncId); | 200 DictionaryPrefUpdate sync_id_update(local_state, kSupervisedUserSyncId); |
| 201 DictionaryPrefUpdate manager_update(local_state, kManagedUserManagers); | 201 DictionaryPrefUpdate manager_update(local_state, kSupervisedUserManagers); |
| 202 DictionaryPrefUpdate manager_name_update(local_state, | 202 DictionaryPrefUpdate manager_name_update(local_state, |
| 203 kManagedUserManagerNames); | 203 kSupervisedUserManagerNames); |
| 204 DictionaryPrefUpdate manager_email_update(local_state, | 204 DictionaryPrefUpdate manager_email_update( |
| 205 kManagedUserManagerDisplayEmails); | 205 local_state, |
| 206 kSupervisedUserManagerDisplayEmails); |
| 206 | 207 |
| 207 prefs_new_users_update->Insert(0, new base::StringValue(local_user_id)); | 208 prefs_new_users_update->Insert(0, new base::StringValue(local_user_id)); |
| 208 | 209 |
| 209 sync_id_update->SetWithoutPathExpansion(local_user_id, | 210 sync_id_update->SetWithoutPathExpansion(local_user_id, |
| 210 new base::StringValue(sync_user_id)); | 211 new base::StringValue(sync_user_id)); |
| 211 manager_update->SetWithoutPathExpansion(local_user_id, | 212 manager_update->SetWithoutPathExpansion(local_user_id, |
| 212 new base::StringValue(manager->email())); | 213 new base::StringValue(manager->email())); |
| 213 manager_name_update->SetWithoutPathExpansion(local_user_id, | 214 manager_name_update->SetWithoutPathExpansion(local_user_id, |
| 214 new base::StringValue(manager->GetDisplayName())); | 215 new base::StringValue(manager->GetDisplayName())); |
| 215 manager_email_update->SetWithoutPathExpansion(local_user_id, | 216 manager_email_update->SetWithoutPathExpansion(local_user_id, |
| 216 new base::StringValue(manager->display_email())); | 217 new base::StringValue(manager->display_email())); |
| 217 | 218 |
| 218 owner_->SaveUserDisplayName(local_user_id, display_name); | 219 owner_->SaveUserDisplayName(local_user_id, display_name); |
| 219 | 220 |
| 220 g_browser_process->local_state()->CommitPendingWrite(); | 221 g_browser_process->local_state()->CommitPendingWrite(); |
| 221 return new_user; | 222 return new_user; |
| 222 } | 223 } |
| 223 | 224 |
| 224 std::string SupervisedUserManagerImpl::GetUserSyncId(const std::string& user_id) | 225 std::string SupervisedUserManagerImpl::GetUserSyncId(const std::string& user_id) |
| 225 const { | 226 const { |
| 226 std::string result; | 227 std::string result; |
| 227 GetUserStringValue(user_id, kManagedUserSyncId, &result); | 228 GetUserStringValue(user_id, kSupervisedUserSyncId, &result); |
| 228 return result; | 229 return result; |
| 229 } | 230 } |
| 230 | 231 |
| 231 base::string16 SupervisedUserManagerImpl::GetManagerDisplayName( | 232 base::string16 SupervisedUserManagerImpl::GetManagerDisplayName( |
| 232 const std::string& user_id) const { | 233 const std::string& user_id) const { |
| 233 PrefService* local_state = g_browser_process->local_state(); | 234 PrefService* local_state = g_browser_process->local_state(); |
| 234 const base::DictionaryValue* manager_names = | 235 const base::DictionaryValue* manager_names = |
| 235 local_state->GetDictionary(kManagedUserManagerNames); | 236 local_state->GetDictionary(kSupervisedUserManagerNames); |
| 236 base::string16 result; | 237 base::string16 result; |
| 237 if (manager_names->GetStringWithoutPathExpansion(user_id, &result) && | 238 if (manager_names->GetStringWithoutPathExpansion(user_id, &result) && |
| 238 !result.empty()) | 239 !result.empty()) |
| 239 return result; | 240 return result; |
| 240 return base::UTF8ToUTF16(GetManagerDisplayEmail(user_id)); | 241 return base::UTF8ToUTF16(GetManagerDisplayEmail(user_id)); |
| 241 } | 242 } |
| 242 | 243 |
| 243 std::string SupervisedUserManagerImpl::GetManagerUserId( | 244 std::string SupervisedUserManagerImpl::GetManagerUserId( |
| 244 const std::string& user_id) const { | 245 const std::string& user_id) const { |
| 245 std::string result; | 246 std::string result; |
| 246 GetUserStringValue(user_id, kManagedUserManagers, &result); | 247 GetUserStringValue(user_id, kSupervisedUserManagers, &result); |
| 247 return result; | 248 return result; |
| 248 } | 249 } |
| 249 | 250 |
| 250 std::string SupervisedUserManagerImpl::GetManagerDisplayEmail( | 251 std::string SupervisedUserManagerImpl::GetManagerDisplayEmail( |
| 251 const std::string& user_id) const { | 252 const std::string& user_id) const { |
| 252 std::string result; | 253 std::string result; |
| 253 if (GetUserStringValue(user_id, kManagedUserManagerDisplayEmails, &result) && | 254 if (GetUserStringValue(user_id, |
| 255 kSupervisedUserManagerDisplayEmails, |
| 256 &result) && |
| 254 !result.empty()) | 257 !result.empty()) |
| 255 return result; | 258 return result; |
| 256 return GetManagerUserId(user_id); | 259 return GetManagerUserId(user_id); |
| 257 } | 260 } |
| 258 | 261 |
| 259 void SupervisedUserManagerImpl::GetPasswordInformation( | 262 void SupervisedUserManagerImpl::GetPasswordInformation( |
| 260 const std::string& user_id, | 263 const std::string& user_id, |
| 261 base::DictionaryValue* result) { | 264 base::DictionaryValue* result) { |
| 262 int value; | 265 int value; |
| 263 if (GetUserIntegerValue(user_id, kSupervisedUserPasswordSchema, &value)) | 266 if (GetUserIntegerValue(user_id, kSupervisedUserPasswordSchema, &value)) |
| (...skipping 176 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 440 prefs->ClearPref(kLocallyManagedUserCreationTransactionUserId); | 443 prefs->ClearPref(kLocallyManagedUserCreationTransactionUserId); |
| 441 prefs->CommitPendingWrite(); | 444 prefs->CommitPendingWrite(); |
| 442 } | 445 } |
| 443 | 446 |
| 444 void SupervisedUserManagerImpl::RemoveNonCryptohomeData( | 447 void SupervisedUserManagerImpl::RemoveNonCryptohomeData( |
| 445 const std::string& user_id) { | 448 const std::string& user_id) { |
| 446 PrefService* prefs = g_browser_process->local_state(); | 449 PrefService* prefs = g_browser_process->local_state(); |
| 447 ListPrefUpdate prefs_new_users_update(prefs, kLocallyManagedUsersFirstRun); | 450 ListPrefUpdate prefs_new_users_update(prefs, kLocallyManagedUsersFirstRun); |
| 448 prefs_new_users_update->Remove(base::StringValue(user_id), NULL); | 451 prefs_new_users_update->Remove(base::StringValue(user_id), NULL); |
| 449 | 452 |
| 450 CleanPref(user_id, kManagedUserSyncId); | 453 CleanPref(user_id, kSupervisedUserSyncId); |
| 451 CleanPref(user_id, kManagedUserManagers); | 454 CleanPref(user_id, kSupervisedUserManagers); |
| 452 CleanPref(user_id, kManagedUserManagerNames); | 455 CleanPref(user_id, kSupervisedUserManagerNames); |
| 453 CleanPref(user_id, kManagedUserManagerDisplayEmails); | 456 CleanPref(user_id, kSupervisedUserManagerDisplayEmails); |
| 454 CleanPref(user_id, kSupervisedUserPasswordSalt); | 457 CleanPref(user_id, kSupervisedUserPasswordSalt); |
| 455 CleanPref(user_id, kSupervisedUserPasswordSchema); | 458 CleanPref(user_id, kSupervisedUserPasswordSchema); |
| 456 CleanPref(user_id, kSupervisedUserPasswordRevision); | 459 CleanPref(user_id, kSupervisedUserPasswordRevision); |
| 457 CleanPref(user_id, kSupervisedUserNeedPasswordUpdate); | 460 CleanPref(user_id, kSupervisedUserNeedPasswordUpdate); |
| 458 CleanPref(user_id, kSupervisedUserIncompleteKey); | 461 CleanPref(user_id, kSupervisedUserIncompleteKey); |
| 459 } | 462 } |
| 460 | 463 |
| 461 void SupervisedUserManagerImpl::CleanPref(const std::string& user_id, | 464 void SupervisedUserManagerImpl::CleanPref(const std::string& user_id, |
| 462 const char* key) { | 465 const char* key) { |
| 463 PrefService* prefs = g_browser_process->local_state(); | 466 PrefService* prefs = g_browser_process->local_state(); |
| 464 DictionaryPrefUpdate dict_update(prefs, key); | 467 DictionaryPrefUpdate dict_update(prefs, key); |
| 465 dict_update->RemoveWithoutPathExpansion(user_id, NULL); | 468 dict_update->RemoveWithoutPathExpansion(user_id, NULL); |
| 466 } | 469 } |
| 467 | 470 |
| 468 bool SupervisedUserManagerImpl::CheckForFirstRun(const std::string& user_id) { | 471 bool SupervisedUserManagerImpl::CheckForFirstRun(const std::string& user_id) { |
| 469 ListPrefUpdate prefs_new_users_update(g_browser_process->local_state(), | 472 ListPrefUpdate prefs_new_users_update(g_browser_process->local_state(), |
| 470 kLocallyManagedUsersFirstRun); | 473 kLocallyManagedUsersFirstRun); |
| 471 return prefs_new_users_update->Remove(base::StringValue(user_id), NULL); | 474 return prefs_new_users_update->Remove(base::StringValue(user_id), NULL); |
| 472 } | 475 } |
| 473 | 476 |
| 474 void SupervisedUserManagerImpl::UpdateManagerName(const std::string& manager_id, | 477 void SupervisedUserManagerImpl::UpdateManagerName(const std::string& manager_id, |
| 475 const base::string16& new_display_name) { | 478 const base::string16& new_display_name) { |
| 476 PrefService* local_state = g_browser_process->local_state(); | 479 PrefService* local_state = g_browser_process->local_state(); |
| 477 | 480 |
| 478 const base::DictionaryValue* manager_ids = | 481 const base::DictionaryValue* manager_ids = |
| 479 local_state->GetDictionary(kManagedUserManagers); | 482 local_state->GetDictionary(kSupervisedUserManagers); |
| 480 | 483 |
| 481 DictionaryPrefUpdate manager_name_update(local_state, | 484 DictionaryPrefUpdate manager_name_update(local_state, |
| 482 kManagedUserManagerNames); | 485 kSupervisedUserManagerNames); |
| 483 for (base::DictionaryValue::Iterator it(*manager_ids); !it.IsAtEnd(); | 486 for (base::DictionaryValue::Iterator it(*manager_ids); !it.IsAtEnd(); |
| 484 it.Advance()) { | 487 it.Advance()) { |
| 485 std::string user_id; | 488 std::string user_id; |
| 486 bool has_manager_id = it.value().GetAsString(&user_id); | 489 bool has_manager_id = it.value().GetAsString(&user_id); |
| 487 DCHECK(has_manager_id); | 490 DCHECK(has_manager_id); |
| 488 if (user_id == manager_id) { | 491 if (user_id == manager_id) { |
| 489 manager_name_update->SetWithoutPathExpansion( | 492 manager_name_update->SetWithoutPathExpansion( |
| 490 it.key(), | 493 it.key(), |
| 491 new base::StringValue(new_display_name)); | 494 new base::StringValue(new_display_name)); |
| 492 } | 495 } |
| (...skipping 14 matching lines...) Expand all Loading... |
| 507 content::BrowserThread::GetBlockingPool(), | 510 content::BrowserThread::GetBlockingPool(), |
| 508 FROM_HERE, | 511 FROM_HERE, |
| 509 base::Bind(&LoadSyncToken, profile_dir), | 512 base::Bind(&LoadSyncToken, profile_dir), |
| 510 callback); | 513 callback); |
| 511 } | 514 } |
| 512 | 515 |
| 513 void SupervisedUserManagerImpl::ConfigureSyncWithToken( | 516 void SupervisedUserManagerImpl::ConfigureSyncWithToken( |
| 514 Profile* profile, | 517 Profile* profile, |
| 515 const std::string& token) { | 518 const std::string& token) { |
| 516 if (!token.empty()) | 519 if (!token.empty()) |
| 517 ManagedUserServiceFactory::GetForProfile(profile)->InitSync(token); | 520 SupervisedUserServiceFactory::GetForProfile(profile)->InitSync(token); |
| 518 } | 521 } |
| 519 | 522 |
| 520 } // namespace chromeos | 523 } // namespace chromeos |
| OLD | NEW |