Temporarily disable extensions and sync while a profile is locked - Profiles Approach

chrome/browser/extensions/extension_service.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_
 #define CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_
 
 #include <map>
 #include <set>
 #include <string>
@@ skipping 277 matching lines @@
   // cannot be disabled, does nothing.
   virtual void DisableExtension(
       const std::string& extension_id,
       extensions::Extension::DisableReason disable_reason);
 
   // Disable non-default and non-managed extensions with ids not in
   // |except_ids|. Default extensions are those from the Web Store with
   // |was_installed_by_default| flag.
   void DisableUserExtensions(const std::vector<std::string>& except_ids);
 
+  // Extensions specified by |extension_ids| should become locked. Extensions

[not at google - send to devlin, 2014/11/12 18:23:00]

You might want to mention that "locking" does imply unloading all extensions.
"Locking" would easily be misinterpreted as preventing any changes whatsoever,
which isn't want the feature is.

Funnily enough it almost seems like "blocked" is a better term for this whole
thing. You may in fact want to think of a more abstract term for this whole
thing, IIRC:
- the policy team was also looking at a feature to disable all extensions?
- this functionality would go nicely with a --disable-extensions or something
flag, or feature, which I'm not sure - maybe we already have?

[Mike Lerman, 2014/11/12 20:58:42]

Done.

+  // are no longer considered enabled or disabled. Blacklisted extensions are
+  // now considered both blacklisted and locked.
+  void LockAllExtensions();
+
+  // All locked extensions should revert to being either enabled or disabled
+  // as appropriate.
+  void UnlockAllLockedExtensions();
+
   // Updates the |extension|'s granted permissions lists to include all
   // permissions in the |extension|'s manifest and re-enables the
   // extension.
   void GrantPermissionsAndEnableExtension(
       const extensions::Extension* extension);
 
   // Updates the |extension|'s granted permissions lists to include all
   // permissions in the |extensions|'s manifest.
   void GrantPermissions(const extensions::Extension* extension);
 
@@ skipping 425 matching lines @@
                            GreylistedExtensionDisabled);
   FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest,
                            GreylistDontEnableManuallyDisabled);
   FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest,
                            GreylistUnknownDontChange);
 
   DISALLOW_COPY_AND_ASSIGN(ExtensionService);
 };
 
 #endif  // CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_