Temporarily disable extensions and sync while a profile is locked - Profiles Approach

chrome/common/extensions/api/_permission_features.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This features file defines permissions for extension APIs implemented
 // under src/chrome.
 // See extensions/common/features/* to understand this file, in particular
 // feature.h, simple_feature.h, and base_feature_provider.h.
 
 // To add a new whitelisted ID, SHA-1 it and force it to uppercase. In Bash:
@@ skipping 911 matching lines @@
   },
   "screenlockPrivate": [{
     "platforms": ["chromeos"],
     "channel": "stable",
     "extension_types": ["platform_app"],
     "location": "component"
   }, {
     "platforms": ["mac", "win", "linux"],
     "channel": "stable",
     "extension_types": ["platform_app"],
+    "location": "component",

[not at google - send to devlin, 2014/11/19 20:20:42]

Why did you need to make this change?

[Mike Lerman, 2014/11/20 17:18:33]

After consultation with isherman@, who works on this API and Component. Since I
changed the screenlock_private_apitest to always run as a component extension
for Desktop, any future extensions which access this API (of which there are
currently none) should have to be components. The Blocked-Extension rule would
also require this - screen unlocking extensions need to be available while the
Profile's locked, and if they're not components then they won't be loaded.

[not at google - send to devlin, 2014/11/20 18:27:20]

Alright, it just seemed orthogonal to your API.

Though this compound screenlockPrivate rule is now a bit odd. It's available
- on chromeos, for any component extension
- on other platforms, for only specific component extensions

I like the explicit whitelist, though if it's a component extension I don't
really see the point. Seems like the whole rule could basically be

"screenlockPrivate": {
  "channel": "stable",
  "extension_types": ["platform_app"],
  "location": "component"
}

[Ilya Sherman, 2014/11/21 02:08:41]

Agreed, that's what I had intended to nudge Mike towards.  Sorry for any
confusion!

     "whitelist": [
       "lkegkdgachcnekllcdfkijonogckdnjo",  // API test
       "E13990DC5440B6E270503DA27A35762F423725C3"   // dogfood
     ]
   }],
   "screensaver": {
     "channel": "stable",
     "extension_types": ["legacy_packaged_app", "hosted_app", "platform_app"]
   },
   "sessions": {
@@ skipping 130 matching lines @@
   "webstorePrivate": {
     "channel": "stable",
     "extension_types": ["extension", "legacy_packaged_app", "hosted_app"],
     "whitelist": [
       "B44D08FD98F1523ED5837D78D0A606EA9D6206E5",  // Web Store
       "2653F6F6C39BC6EEBD36A09AFB92A19782FF7EB4",  // Enterprise Web Store
       "2779FA8B45841D61A37207CCFAC9CB393964FE5B"   // Login Proxy (prototype)
     ]
   }
 }