Supervised users: Slightly relax restrictions around extensions.

chrome/browser/ui/extensions/extension_enable_flow.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/extensions/extension_enable_flow.h"
 
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/extensions/extension_service.h"
+#include "chrome/browser/extensions/extension_util.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/extensions/extension_enable_flow_delegate.h"
 #include "content/public/browser/notification_details.h"
 #include "content/public/browser/notification_source.h"
 #include "extensions/browser/extension_prefs.h"
 #include "extensions/browser/extension_registry.h"
 #include "extensions/browser/extension_system.h"
 
 using extensions::Extension;
 
@@ skipping 61 matching lines @@
 
 void ExtensionEnableFlow::CheckPermissionAndMaybePromptUser() {
   ExtensionService* service =
       extensions::ExtensionSystem::Get(profile_)->extension_service();
   const Extension* extension = service->GetExtensionById(extension_id_, true);
   if (!extension) {
     delegate_->ExtensionEnableFlowAborted(false);  // |delegate_| may delete us.
     return;
   }
 
+  // Supervised users can't re-enable custodian-installed extensions.
+  if (extensions::util::IsExtensionSupervised(extension, profile_)) {
+    delegate_->ExtensionEnableFlowAborted(false);  // |delegate_| may delete us.
+    return;
+  }
+
   extensions::ExtensionPrefs* prefs = extensions::ExtensionPrefs::Get(profile_);
   if (!prefs->DidExtensionEscalatePermissions(extension_id_)) {
     // Enable the extension immediately if its privileges weren't escalated.
     // This is a no-op if the extension was previously terminated.
     service->EnableExtension(extension_id_);
 
     delegate_->ExtensionEnableFlowFinished();  // |delegate_| may delete us.
     return;
   }
 
@@ skipping 62 matching lines @@
   }
 
   service->GrantPermissionsAndEnableExtension(extension);
   delegate_->ExtensionEnableFlowFinished();  // |delegate_| may delete us.
 }
 
 void ExtensionEnableFlow::InstallUIAbort(bool user_initiated) {
   delegate_->ExtensionEnableFlowAborted(user_initiated);
   // |delegate_| may delete us.
 }