Check policy when checking device access for enumerating devices.

chrome/browser/profiles/profile_io_data.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_
 #define CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 402 matching lines @@
   void SetCookieSettingsForTesting(CookieSettings* cookie_settings);
 
   void set_signin_names_for_testing(SigninNamesOnIOThread* signin_names);
 
  private:
   class ResourceContext : public content::ResourceContext {
    public:
     explicit ResourceContext(ProfileIOData* io_data);
     virtual ~ResourceContext();
 
+    void set_profile(Profile* profile);

[tommi (sloooow) - chröme, 2014/08/22 19:42:56]

I'm wary of making changes to ResourceContext and this one seems to be
potentially introducing circular references or the possibility of associating a
resource context to a profile that is not related to the io_data_.
If at all possible, I'd like to not make changes to this file.

[Henrik Grunell, 2014/08/25 08:21:46]

Maybe asking for access based on policy via RenderFrameHostDelegate instead, the
same route as RequestMediaAccessPermission currently takes? I'll also need to
add asking for app permission (in case of an extension), which should be done
via RenderFrameHostDelegate. So adding both there might make sense anyway. Wdyt?

+
     // ResourceContext implementation:
     virtual net::HostResolver* GetHostResolver() OVERRIDE;
     virtual net::URLRequestContext* GetRequestContext() OVERRIDE;
     virtual scoped_ptr<net::ClientCertStore> CreateClientCertStore() OVERRIDE;
     virtual void CreateKeygenHandler(
         uint32 key_size_in_bits,
         const std::string& challenge_string,
         const GURL& url,
         const base::Callback<void(scoped_ptr<net::KeygenHandler>)>& callback)
         OVERRIDE;
     virtual bool AllowMicAccess(const GURL& origin) OVERRIDE;
     virtual bool AllowCameraAccess(const GURL& origin) OVERRIDE;
     virtual SaltCallback GetMediaDeviceIDSalt() OVERRIDE;
 
    private:
     friend class ProfileIOData;
 
     // Helper method that returns true if |type| is allowed for |origin|, false
     // otherwise.
     bool AllowContentAccess(const GURL& origin, ContentSettingsType type);
 
     ProfileIOData* const io_data_;
+    Profile* profile_;

[tommi (sloooow) - chröme, 2014/08/22 19:42:56]

this would need a lot of documentation I think and tests to go with it

 
     net::HostResolver* host_resolver_;
     net::URLRequestContext* request_context_;
   };
 
   typedef std::map<StoragePartitionDescriptor,
                    net::URLRequestContext*,
                    StoragePartitionDescriptorLess>
       URLRequestContextMap;
 
@@ skipping 166 matching lines @@
 
   // TODO(jhawkins): Remove once crbug.com/102004 is fixed.
   bool initialized_on_UI_thread_;
 
   const Profile::ProfileType profile_type_;
 
   DISALLOW_COPY_AND_ASSIGN(ProfileIOData);
 };
 
 #endif  // CHROME_BROWSER_PROFILES_PROFILE_IO_DATA_H_