| OLD | NEW |
| 1 // Copyright 2012 The Chromium Authors. All rights reserved. | 1 // Copyright 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/extensions/standard_management_policy_provider.h" | 5 #include "chrome/browser/extensions/standard_management_policy_provider.h" |
| 6 | 6 |
| 7 #include <algorithm> | |
| 8 #include <string> | 7 #include <string> |
| 9 | 8 |
| 10 #include "base/logging.h" | 9 #include "base/logging.h" |
| 11 #include "base/strings/string16.h" | 10 #include "base/strings/string16.h" |
| 12 #include "base/strings/utf_string_conversions.h" | 11 #include "base/strings/utf_string_conversions.h" |
| 13 #include "chrome/browser/extensions/extension_management.h" | 12 #include "chrome/browser/extensions/extension_management.h" |
| 14 #include "chrome/browser/extensions/external_component_loader.h" | 13 #include "chrome/browser/extensions/external_component_loader.h" |
| 15 #include "extensions/common/extension.h" | 14 #include "extensions/common/extension.h" |
| 16 #include "extensions/common/manifest.h" | 15 #include "extensions/common/manifest.h" |
| 17 #include "grit/extensions_strings.h" | 16 #include "grit/extensions_strings.h" |
| (...skipping 52 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 70 #endif | 69 #endif |
| 71 } | 70 } |
| 72 | 71 |
| 73 bool StandardManagementPolicyProvider::UserMayLoad( | 72 bool StandardManagementPolicyProvider::UserMayLoad( |
| 74 const Extension* extension, | 73 const Extension* extension, |
| 75 base::string16* error) const { | 74 base::string16* error) const { |
| 76 // Component extensions are always allowed. | 75 // Component extensions are always allowed. |
| 77 if (Manifest::IsComponentLocation(extension->location())) | 76 if (Manifest::IsComponentLocation(extension->location())) |
| 78 return true; | 77 return true; |
| 79 | 78 |
| 80 // Fields in |by_id| will automatically fall back to default settings if | 79 ExtensionManagement::InstallationMode installation_mode = |
| 81 // they are not specified by policy. | 80 settings_->GetInstallationMode(extension->id()); |
| 82 const ExtensionManagement::IndividualSettings& by_id = | |
| 83 settings_->ReadById(extension->id()); | |
| 84 const ExtensionManagement::GlobalSettings& global = | |
| 85 settings_->ReadGlobalSettings(); | |
| 86 | 81 |
| 87 // Force-installed extensions cannot be overwritten manually. | 82 // Force-installed extensions cannot be overwritten manually. |
| 88 if (!Manifest::IsPolicyLocation(extension->location()) && | 83 if (!Manifest::IsPolicyLocation(extension->location()) && |
| 89 by_id.installation_mode == ExtensionManagement::INSTALLATION_FORCED) { | 84 installation_mode == ExtensionManagement::INSTALLATION_FORCED) { |
| 90 return ReturnLoadError(extension, error); | 85 return ReturnLoadError(extension, error); |
| 91 } | 86 } |
| 92 | 87 |
| 93 // Check whether the extension type is allowed. | 88 // Check whether the extension type is allowed. |
| 94 // | 89 // |
| 95 // If you get a compile error here saying that the type you added is not | 90 // If you get a compile error here saying that the type you added is not |
| 96 // handled by the switch statement below, please consider whether enterprise | 91 // handled by the switch statement below, please consider whether enterprise |
| 97 // policy should be able to disallow extensions of the new type. If so, add | 92 // policy should be able to disallow extensions of the new type. If so, add |
| 98 // a branch to the second block and add a line to the definition of | 93 // a branch to the second block and add a line to the definition of |
| 99 // kExtensionAllowedTypesMap in configuration_policy_handler_list.cc. | 94 // kExtensionAllowedTypesMap in configuration_policy_handler_list.cc. |
| 100 switch (extension->GetType()) { | 95 switch (extension->GetType()) { |
| 101 case Manifest::TYPE_UNKNOWN: | 96 case Manifest::TYPE_UNKNOWN: |
| 102 break; | 97 break; |
| 103 case Manifest::TYPE_EXTENSION: | 98 case Manifest::TYPE_EXTENSION: |
| 104 case Manifest::TYPE_THEME: | 99 case Manifest::TYPE_THEME: |
| 105 case Manifest::TYPE_USER_SCRIPT: | 100 case Manifest::TYPE_USER_SCRIPT: |
| 106 case Manifest::TYPE_HOSTED_APP: | 101 case Manifest::TYPE_HOSTED_APP: |
| 107 case Manifest::TYPE_LEGACY_PACKAGED_APP: | 102 case Manifest::TYPE_LEGACY_PACKAGED_APP: |
| 108 case Manifest::TYPE_PLATFORM_APP: | 103 case Manifest::TYPE_PLATFORM_APP: |
| 109 case Manifest::TYPE_SHARED_MODULE: { | 104 case Manifest::TYPE_SHARED_MODULE: { |
| 110 if (global.has_restricted_allowed_types && | 105 if (!settings_->IsAllowedManifestType(extension->GetType())) |
| 111 std::find(global.allowed_types.begin(), | |
| 112 global.allowed_types.end(), | |
| 113 extension->GetType()) == global.allowed_types.end()) { | |
| 114 return ReturnLoadError(extension, error); | 106 return ReturnLoadError(extension, error); |
| 115 } | |
| 116 break; | 107 break; |
| 117 } | 108 } |
| 118 case Manifest::NUM_LOAD_TYPES: | 109 case Manifest::NUM_LOAD_TYPES: |
| 119 NOTREACHED(); | 110 NOTREACHED(); |
| 120 } | 111 } |
| 121 | 112 |
| 122 if (by_id.installation_mode == ExtensionManagement::INSTALLATION_BLOCKED) | 113 if (installation_mode == ExtensionManagement::INSTALLATION_BLOCKED) |
| 123 return ReturnLoadError(extension, error); | 114 return ReturnLoadError(extension, error); |
| 124 | 115 |
| 125 return true; | 116 return true; |
| 126 } | 117 } |
| 127 | 118 |
| 128 bool StandardManagementPolicyProvider::UserMayModifySettings( | 119 bool StandardManagementPolicyProvider::UserMayModifySettings( |
| 129 const Extension* extension, | 120 const Extension* extension, |
| 130 base::string16* error) const { | 121 base::string16* error) const { |
| 131 return AdminPolicyIsModifiable(extension, error) || | 122 return AdminPolicyIsModifiable(extension, error) || |
| 132 (extension->location() == extensions::Manifest::EXTERNAL_COMPONENT && | 123 (extension->location() == extensions::Manifest::EXTERNAL_COMPONENT && |
| 133 ExternalComponentLoader::IsModifiable(extension)); | 124 ExternalComponentLoader::IsModifiable(extension)); |
| 134 } | 125 } |
| 135 | 126 |
| 136 bool StandardManagementPolicyProvider::MustRemainEnabled( | 127 bool StandardManagementPolicyProvider::MustRemainEnabled( |
| 137 const Extension* extension, | 128 const Extension* extension, |
| 138 base::string16* error) const { | 129 base::string16* error) const { |
| 139 return !AdminPolicyIsModifiable(extension, error) || | 130 return !AdminPolicyIsModifiable(extension, error) || |
| 140 (extension->location() == extensions::Manifest::EXTERNAL_COMPONENT && | 131 (extension->location() == extensions::Manifest::EXTERNAL_COMPONENT && |
| 141 ExternalComponentLoader::IsModifiable(extension)); | 132 ExternalComponentLoader::IsModifiable(extension)); |
| 142 } | 133 } |
| 143 | 134 |
| 144 } // namespace extensions | 135 } // namespace extensions |
| OLD | NEW |