Add update url controlled extension management settings

components/policy/resources/policy_templates.json

Index: components/policy/resources/policy_templates.json
diff --git a/components/policy/resources/policy_templates.json b/components/policy/resources/policy_templates.json
index 5da89727bfd813b9fbde2af0fac98ede6afd2541..bac8f85dcd7b0ed4499eb97adcf4dfb0ef0cd7d5 100644
--- a/components/policy/resources/policy_templates.json
+++ b/components/policy/resources/policy_templates.json
@@ -1763,6 +1763,21 @@
                   },
                 },
               },
+              '^update_url:': {
+                'type': 'object',
+                'properties': {
+                  'installation_mode': {
+                    'type': 'string',
+                    'enum': ['blocked', 'allowed']
+                  },
+                  'blocked_permissions': {
+                    '$ref': 'ListOfPermissions',
+                  },
+                  'allowed_permissions': {
+                    '$ref': 'ListOfPermissions',
+                  },
+                },
+              },
             },
             'properties': {
               '*': {
@@ -1801,6 +1816,9 @@
               'update_url': 'http://example.com/update_url',
               'allowed_permissions': ['downloads'],
             },
+            'update_url:http://www.example.com/update.xml': {
+              'blocked_permissions': ['wallpaper'],
+            },
             '*': {
               'installation_mode': 'blocked',
               'blocked_permissions': ['downloads', 'bookmarks'],
@@ -1814,7 +1832,9 @@
 
           This policy controls multiple settings, including settings controlled by any existing extension-related policies. This policy will override any legacy policies if both are set.
 
-          This policy maps an extension ID to its configuration. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy. The configuration for each extension is another dictionary that can contain the fields documented below.
+          This policy maps an extension ID or an update URL to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy. With an update URL, configuration will be applied to all extensions with the exact update URL stated in manifest of this extension, as described at <ph name="LINK_TO_EXTENSION_DOC1">https://developer.chrome.com/extensions/autoupdate</ph>.
+
+          The configuration for each extension (or extensions with same update URL) is another dictionary that can contain the fields documented below.
 
           "installation_mode": maps to a string indicating the installation mode for the extension. The valid strings are:
           * "allowed": allows the extension to be installed by the user. This is the default behavior.
@@ -1822,9 +1842,9 @@
           * "force_installed": the extension is automatically installed and can't be removed by the user.
           * "normal_installed": the extension is automatically installed but can be disabled by the user.
 
-          The default "installation_mode" can be configured for the "*" extension. Only the "allowed" and "blocked" values can be used in this case.
+          The "installation_mode" can also be configured for multiple extensions as well, including the "*" extension (as default settings) and extensions with same update URL. Only the "allowed" and "blocked" values can be used in this case.
 
-          If the mode is set to "force_installed" or "normal_installed" then an "update_url" must be configured too. The update URL should point to an Update Manifest XML document as described at <ph name="LINK_TO_EXTENSION_DOC1">https://developer.chrome.com/extensions/autoupdate</ph>. Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension will use the update URL indicated in the extension's manifest.
+          If the mode is set to "force_installed" or "normal_installed" then an "update_url" must be configured too. Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension will use the update URL indicated in the extension's manifest. The update URL should point to an Update Manifest XML document as mentioned above.
 
           "blocked_permissions": maps to a list of strings indicating the blocked API permissions for the extension. The permissions names are same as the permission strings declared in manifest of extension as described at <ph name="LINK_TO_EXTENSION_DOC3">https://developer.chrome.com/extensions/declare_permissions</ph>. This setting also can be configured for "*" extension. If the extension requires a permission which is on the blocklist, it will not be allowed to load. If it contains a blocked permission as optional requirement, it will be handled in the normal way, but requesting conflicting permissions will be declined automatically at runtime.