| OLD | NEW |
| 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/policy/profile_policy_connector.h" | 5 #include "chrome/browser/policy/profile_policy_connector.h" |
| 6 | 6 |
| 7 #include <vector> | 7 #include <vector> |
| 8 | 8 |
| 9 #include "base/logging.h" | 9 #include "base/logging.h" |
| 10 #include "chrome/browser/browser_process.h" | 10 #include "chrome/browser/browser_process.h" |
| 11 #include "chrome/browser/policy/browser_policy_connector.h" | 11 #include "chrome/browser/policy/browser_policy_connector.h" |
| 12 #include "chrome/browser/policy/cloud/cloud_policy_manager.h" |
| 12 #include "chrome/browser/policy/configuration_policy_provider.h" | 13 #include "chrome/browser/policy/configuration_policy_provider.h" |
| 13 #include "chrome/browser/policy/policy_service_impl.h" | 14 #include "chrome/browser/policy/policy_service.h" |
| 14 | 15 |
| 15 #if defined(OS_CHROMEOS) | 16 #if defined(OS_CHROMEOS) |
| 16 #include "base/bind.h" | 17 #include "base/bind.h" |
| 17 #include "base/prefs/pref_service.h" | 18 #include "base/prefs/pref_service.h" |
| 18 #include "chrome/browser/chromeos/login/user.h" | 19 #include "chrome/browser/chromeos/login/user.h" |
| 19 #include "chrome/browser/chromeos/login/user_manager.h" | 20 #include "chrome/browser/chromeos/login/user_manager.h" |
| 20 #include "chrome/browser/chromeos/policy/device_local_account_policy_provider.h" | 21 #include "chrome/browser/chromeos/policy/device_local_account_policy_provider.h" |
| 21 #include "chrome/browser/chromeos/policy/login_profile_policy_provider.h" | 22 #include "chrome/browser/chromeos/policy/login_profile_policy_provider.h" |
| 22 #include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" | |
| 23 #include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chrom
eos.h" | |
| 24 #include "chrome/browser/chromeos/policy/user_network_configuration_updater.h" | 23 #include "chrome/browser/chromeos/policy/user_network_configuration_updater.h" |
| 25 #include "chrome/browser/chromeos/profiles/profile_helper.h" | |
| 26 #include "chrome/browser/policy/policy_service.h" | 24 #include "chrome/browser/policy/policy_service.h" |
| 27 #include "chrome/common/pref_names.h" | 25 #include "chrome/common/pref_names.h" |
| 28 #include "chromeos/network/network_handler.h" | 26 #include "chromeos/network/network_handler.h" |
| 29 #include "chromeos/network/onc/onc_certificate_importer_impl.h" | 27 #include "chromeos/network/onc/onc_certificate_importer_impl.h" |
| 30 #else | |
| 31 #include "chrome/browser/policy/cloud/user_cloud_policy_manager.h" | |
| 32 #include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" | |
| 33 #endif | 28 #endif |
| 34 | 29 |
| 35 namespace policy { | 30 namespace policy { |
| 36 | 31 |
| 37 ProfilePolicyConnector::ProfilePolicyConnector(Profile* profile) | 32 ProfilePolicyConnector::ProfilePolicyConnector(Profile* profile) |
| 38 : | 33 : |
| 39 #if defined(OS_CHROMEOS) | 34 #if defined(OS_CHROMEOS) |
| 40 is_primary_user_(false), | 35 is_primary_user_(false), |
| 41 weak_ptr_factory_(this), | 36 weak_ptr_factory_(this), |
| 42 #endif | 37 #endif |
| 43 profile_(profile) {} | 38 profile_(profile) {} |
| 44 | 39 |
| 45 ProfilePolicyConnector::~ProfilePolicyConnector() {} | 40 ProfilePolicyConnector::~ProfilePolicyConnector() {} |
| 46 | 41 |
| 47 void ProfilePolicyConnector::Init(bool force_immediate_load) { | 42 void ProfilePolicyConnector::Init( |
| 43 bool force_immediate_load, |
| 44 #if defined(OS_CHROMEOS) |
| 45 const chromeos::User* user, |
| 46 #endif |
| 47 CloudPolicyManager* user_cloud_policy_manager) { |
| 48 BrowserPolicyConnector* connector = | 48 BrowserPolicyConnector* connector = |
| 49 g_browser_process->browser_policy_connector(); | 49 g_browser_process->browser_policy_connector(); |
| 50 // |providers| contains a list of the policy providers available for the | 50 // |providers| contains a list of the policy providers available for the |
| 51 // PolicyService of this connector. | 51 // PolicyService of this connector. |
| 52 std::vector<ConfigurationPolicyProvider*> providers; | 52 std::vector<ConfigurationPolicyProvider*> providers; |
| 53 | 53 |
| 54 if (user_cloud_policy_manager) |
| 55 providers.push_back(user_cloud_policy_manager); |
| 56 |
| 54 #if defined(OS_CHROMEOS) | 57 #if defined(OS_CHROMEOS) |
| 55 UserCloudPolicyManagerChromeOS* cloud_policy_manager = | |
| 56 UserCloudPolicyManagerFactoryChromeOS::GetForProfile(profile_); | |
| 57 if (cloud_policy_manager) | |
| 58 providers.push_back(cloud_policy_manager); | |
| 59 | |
| 60 bool allow_trusted_certs_from_policy = false; | 58 bool allow_trusted_certs_from_policy = false; |
| 61 chromeos::User* user = NULL; | 59 if (!user) { |
| 62 if (chromeos::ProfileHelper::IsSigninProfile(profile_)) { | 60 // This case occurs for the signin profile. |
| 63 special_user_policy_provider_.reset(new LoginProfilePolicyProvider( | 61 special_user_policy_provider_.reset( |
| 64 connector->GetPolicyService())); | 62 new LoginProfilePolicyProvider(connector->GetPolicyService())); |
| 65 special_user_policy_provider_->Init(); | 63 special_user_policy_provider_->Init(); |
| 66 } else { | 64 } else { |
| 67 // |user| should never be NULL except for the signin profile. | 65 // |user| should never be NULL except for the signin profile. |
| 68 chromeos::UserManager* user_manager = chromeos::UserManager::Get(); | 66 is_primary_user_ = user == chromeos::UserManager::Get()->GetPrimaryUser(); |
| 69 user = user_manager->GetUserByProfile(profile_); | |
| 70 CHECK(user); | |
| 71 std::string username = user->email(); | |
| 72 is_primary_user_ = | |
| 73 chromeos::UserManager::Get()->GetLoggedInUsers().size() == 1; | |
| 74 if (user->GetType() == chromeos::User::USER_TYPE_PUBLIC_ACCOUNT) | 67 if (user->GetType() == chromeos::User::USER_TYPE_PUBLIC_ACCOUNT) |
| 75 InitializeDeviceLocalAccountPolicyProvider(username); | 68 InitializeDeviceLocalAccountPolicyProvider(user->email()); |
| 76 // Allow trusted certs from policy only for managed regular accounts. | 69 // Allow trusted certs from policy only for managed regular accounts. |
| 77 const bool is_managed = | 70 const bool is_managed = connector->GetUserAffiliation(user->email()) == |
| 78 connector->GetUserAffiliation(username) == USER_AFFILIATION_MANAGED; | 71 USER_AFFILIATION_MANAGED; |
| 79 if (is_managed && user->GetType() == chromeos::User::USER_TYPE_REGULAR) | 72 if (is_managed && user->GetType() == chromeos::User::USER_TYPE_REGULAR) |
| 80 allow_trusted_certs_from_policy = true; | 73 allow_trusted_certs_from_policy = true; |
| 81 } | 74 } |
| 82 if (special_user_policy_provider_) | 75 if (special_user_policy_provider_) |
| 83 providers.push_back(special_user_policy_provider_.get()); | 76 providers.push_back(special_user_policy_provider_.get()); |
| 84 | |
| 85 #else | |
| 86 UserCloudPolicyManager* cloud_policy_manager = | |
| 87 UserCloudPolicyManagerFactory::GetForProfile(profile_); | |
| 88 if (cloud_policy_manager) | |
| 89 providers.push_back(cloud_policy_manager); | |
| 90 #endif | 77 #endif |
| 91 | 78 |
| 92 policy_service_ = connector->CreatePolicyService(providers); | 79 policy_service_ = connector->CreatePolicyService(providers); |
| 93 | 80 |
| 94 #if defined(OS_CHROMEOS) | 81 #if defined(OS_CHROMEOS) |
| 95 if (is_primary_user_) { | 82 if (is_primary_user_) { |
| 96 if (cloud_policy_manager) | 83 if (user_cloud_policy_manager) |
| 97 connector->SetUserPolicyDelegate(cloud_policy_manager); | 84 connector->SetUserPolicyDelegate(user_cloud_policy_manager); |
| 98 else if (special_user_policy_provider_) | 85 else if (special_user_policy_provider_) |
| 99 connector->SetUserPolicyDelegate(special_user_policy_provider_.get()); | 86 connector->SetUserPolicyDelegate(special_user_policy_provider_.get()); |
| 100 | 87 |
| 101 // A reference to |user| is stored by the NetworkConfigurationUpdater until | |
| 102 // the Updater is destructed during Shutdown. | |
| 103 network_configuration_updater_ = | 88 network_configuration_updater_ = |
| 104 UserNetworkConfigurationUpdater::CreateForUserPolicy( | 89 UserNetworkConfigurationUpdater::CreateForUserPolicy( |
| 105 allow_trusted_certs_from_policy, | 90 allow_trusted_certs_from_policy, |
| 106 *user, | 91 *user, |
| 107 scoped_ptr<chromeos::onc::CertificateImporter>( | 92 scoped_ptr<chromeos::onc::CertificateImporter>( |
| 108 new chromeos::onc::CertificateImporterImpl), | 93 new chromeos::onc::CertificateImporterImpl), |
| 109 policy_service(), | 94 policy_service(), |
| 110 chromeos::NetworkHandler::Get() | 95 chromeos::NetworkHandler::Get() |
| 111 ->managed_network_configuration_handler()); | 96 ->managed_network_configuration_handler()); |
| 112 } | 97 } |
| (...skipping 55 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 168 connector->GetDeviceLocalAccountPolicyService(); | 153 connector->GetDeviceLocalAccountPolicyService(); |
| 169 if (!device_local_account_policy_service) | 154 if (!device_local_account_policy_service) |
| 170 return; | 155 return; |
| 171 special_user_policy_provider_.reset(new DeviceLocalAccountPolicyProvider( | 156 special_user_policy_provider_.reset(new DeviceLocalAccountPolicyProvider( |
| 172 username, device_local_account_policy_service)); | 157 username, device_local_account_policy_service)); |
| 173 special_user_policy_provider_->Init(); | 158 special_user_policy_provider_->Init(); |
| 174 } | 159 } |
| 175 #endif | 160 #endif |
| 176 | 161 |
| 177 } // namespace policy | 162 } // namespace policy |
| OLD | NEW |