Wire up component cloud policy to device local accounts.

chrome/browser/chromeos/policy/device_local_account_policy_provider.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/device_local_account_policy_provider.h"
 
 #include "base/bind.h"
+#include "base/command_line.h"
 #include "base/values.h"
 #include "chrome/browser/chromeos/policy/device_local_account.h"
 #include "chrome/browser/chromeos/policy/device_local_account_external_data_manager.h"
 #include "chromeos/dbus/power_policy_controller.h"
 #include "components/policy/core/common/cloud/cloud_policy_core.h"
 #include "components/policy/core/common/cloud/cloud_policy_service.h"
 #include "components/policy/core/common/policy_bundle.h"
 #include "components/policy/core/common/policy_map.h"
 #include "components/policy/core/common/policy_namespace.h"
+#include "components/policy/core/common/policy_switches.h"
+#include "content/public/browser/browser_thread.h"
+#include "net/url_request/url_request_context_getter.h"
 #include "policy/policy_constants.h"
 
 namespace policy {
 
 DeviceLocalAccountPolicyProvider::DeviceLocalAccountPolicyProvider(
     const std::string& user_id,
     DeviceLocalAccountPolicyService* service,
     scoped_ptr<PolicyMap> chrome_policy_overrides)
     : user_id_(user_id),
       service_(service),
@@ skipping 60 matching lines @@
         NULL);
   }
 
   scoped_ptr<DeviceLocalAccountPolicyProvider> provider(
       new DeviceLocalAccountPolicyProvider(user_id,
                                            device_local_account_policy_service,
                                            chrome_policy_overrides.Pass()));
   return provider.Pass();
 }
 
+void DeviceLocalAccountPolicyProvider::Init(SchemaRegistry* schema_registry) {
+  ConfigurationPolicyProvider::Init(schema_registry);
+  MaybeCreateComponentPolicyService();
+}
+
 bool DeviceLocalAccountPolicyProvider::IsInitializationComplete(
     PolicyDomain domain) const {
   if (domain == POLICY_DOMAIN_CHROME)
     return store_initialized_;
+  if (ComponentCloudPolicyService::SupportsDomain(domain) &&
+      component_policy_service_) {
+    return component_policy_service_->is_initialized();

[bartfab (slow), 2014/06/20 09:17:25]

Is it correct for this method to return |true| if the
|component_policy_service_| has simply not been initialized yet?

[Joao da Silva, 2014/06/20 11:48:45]

Good observation. In the next CL the component_policy_service_ has already been
created by the time this is called; if it's NULL then it has been disabled via
the command line flag, and in that case this should return true.

+  }
   return true;
 }
 
 void DeviceLocalAccountPolicyProvider::RefreshPolicies() {
   DeviceLocalAccountPolicyBroker* broker = GetBroker();
   if (broker && broker->core()->service()) {
     waiting_for_policy_refresh_ = true;
     broker->core()->service()->RefreshPolicy(
         base::Bind(&DeviceLocalAccountPolicyProvider::ReportPolicyRefresh,
                    weak_factory_.GetWeakPtr()));
   } else {
     UpdateFromBroker();
   }
 }
 
+void DeviceLocalAccountPolicyProvider::Shutdown() {
+  component_policy_service_.reset();
+  ConfigurationPolicyProvider::Shutdown();
+}
+
 void DeviceLocalAccountPolicyProvider::OnPolicyUpdated(
     const std::string& user_id) {
-  if (user_id == user_id_)
+  if (user_id == user_id_) {
+    MaybeCreateComponentPolicyService();
     UpdateFromBroker();
+  }
 }
 
 void DeviceLocalAccountPolicyProvider::OnDeviceLocalAccountsChanged() {
+  MaybeCreateComponentPolicyService();
   UpdateFromBroker();
 }
 
+void DeviceLocalAccountPolicyProvider::OnBrokerShutdown(
+    DeviceLocalAccountPolicyBroker* broker) {
+  if (broker->user_id() == user_id_) {
+    // The |component_policy_service_| relies on the broker's CloudPolicyCore,

[bartfab (slow), 2014/06/20 09:17:24]

Nit: s/broker/|broker|/

[Joao da Silva, 2014/06/20 11:48:45]

Obsolete in the next CL.

+    // so destroy it if the broker is going away.

[bartfab (slow), 2014/06/20 09:17:25]

Nit: s/broker/|broker|/

[Joao da Silva, 2014/06/20 11:48:45]

Same

+    component_policy_service_.reset();
+  }
+}
+
+void DeviceLocalAccountPolicyProvider::OnComponentCloudPolicyUpdated() {
+  UpdateFromBroker();
+}
+
 DeviceLocalAccountPolicyBroker* DeviceLocalAccountPolicyProvider::GetBroker() {
   return service_->GetBrokerForUser(user_id_);
 }
 
 void DeviceLocalAccountPolicyProvider::ReportPolicyRefresh(bool success) {
   waiting_for_policy_refresh_ = false;
   UpdateFromBroker();
 }
 
 void DeviceLocalAccountPolicyProvider::UpdateFromBroker() {
@@ skipping 10 matching lines @@
       // Wait for the refresh to finish.
       return;
     }
   } else {
     // Keep existing policy, but do send an update.
     waiting_for_policy_refresh_ = false;
     weak_factory_.InvalidateWeakPtrs();
     bundle->CopyFrom(policies());
   }
 
+  if (component_policy_service_)
+    bundle->MergeFrom(component_policy_service_->policy());
+
   // Apply overrides.
   if (chrome_policy_overrides_) {
     PolicyMap& chrome_policy =
         bundle->Get(PolicyNamespace(POLICY_DOMAIN_CHROME, std::string()));
     for (PolicyMap::const_iterator it(chrome_policy_overrides_->begin());
          it != chrome_policy_overrides_->end();
          ++it) {
       const PolicyMap::Entry& entry = it->second;
       chrome_policy.Set(
           it->first, entry.level, entry.scope, entry.value->DeepCopy(), NULL);
     }
   }
 
   UpdatePolicy(bundle.Pass());
 }
 
+void DeviceLocalAccountPolicyProvider::MaybeCreateComponentPolicyService() {
+  if (component_policy_service_)
+    return;  // Already started.
+
+  if (CommandLine::ForCurrentProcess()->HasSwitch(
+          switches::kDisableComponentCloudPolicy)) {
+    // Disabled via the command line.
+    return;
+  }
+
+  DeviceLocalAccountPolicyBroker* broker = GetBroker();
+  if (!broker || !schema_registry())
+    return;  // Missing broker or not initialized yet.
+
+  scoped_ptr<ResourceCache> resource_cache(
+      new ResourceCache(broker->GetComponentPolicyCachePath(),
+                        content::BrowserThread::GetMessageLoopProxyForThread(
+                            content::BrowserThread::FILE)));
+
+  component_policy_service_.reset(new ComponentCloudPolicyService(
+      this,
+      schema_registry(),
+      broker->core(),
+      resource_cache.Pass(),
+      service_->request_context(),
+      content::BrowserThread::GetMessageLoopProxyForThread(
+          content::BrowserThread::FILE),
+      content::BrowserThread::GetMessageLoopProxyForThread(
+          content::BrowserThread::IO)));
+}
+
 }  // namespace policy