Make Easy unlock disabled by default for enterprise user.

chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
@@ skipping 271 matching lines @@
 
   // Default multi-profile behavior for managed accounts to primary-only.
   if (store()->has_policy() &&
       !policy_map->Get(key::kChromeOsMultiProfileUserBehavior)) {
     policy_map->Set(key::kChromeOsMultiProfileUserBehavior,
                     POLICY_LEVEL_MANDATORY,
                     POLICY_SCOPE_USER,
                     new base::StringValue("primary-only"),
                     NULL);
   }
+
+  // Default EasyUnlockAllowed is false for managed accounts.

[Andrew T Wilson (Slow), 2014/08/18 13:37:33]

nit: Change comment to 'Set EasyUnlockAllowed policy to false by default for
managed accounts.'

[xiyuan, 2014/08/18 16:38:28]

Done.

+  if (store()->has_policy() &&
+      !policy_map->Get(key::kEasyUnlockAllowed)) {
+    policy_map->Set(key::kEasyUnlockAllowed,
+                    POLICY_LEVEL_MANDATORY,
+                    POLICY_SCOPE_USER,
+                    new base::FundamentalValue(false),
+                    NULL);
+  }
 }
 
 void UserCloudPolicyManagerChromeOS::FetchPolicyOAuthTokenUsingSigninProfile() {
   scoped_refptr<net::URLRequestContextGetter> signin_context;
   Profile* signin_profile = chromeos::ProfileHelper::GetSigninProfile();
   if (signin_profile)
     signin_context = signin_profile->GetRequestContext();
   if (!signin_context.get()) {
     LOG(ERROR) << "No signin Profile for policy oauth token fetch!";
     OnOAuth2PolicyTokenFetched(
@@ skipping 87 matching lines @@
     // OnComponentCloudPolicyUpdated() once it's ready.
     return;
   }
 
   core()->StartRefreshScheduler();
   core()->TrackRefreshDelayPref(local_state_,
                                 policy_prefs::kUserPolicyRefreshRate);
 }
 
 }  // namespace policy