Supervised users: Slightly relax restrictions around extensions.

chrome/browser/ui/extensions/extension_enable_flow.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/extensions/extension_enable_flow.h"
 
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/extensions/extension_service.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/extensions/extension_enable_flow_delegate.h"
@@ skipping 69 matching lines @@
 
 void ExtensionEnableFlow::CheckPermissionAndMaybePromptUser() {
   ExtensionService* service =
       extensions::ExtensionSystem::Get(profile_)->extension_service();
   const Extension* extension = service->GetExtensionById(extension_id_, true);
   if (!extension) {
     delegate_->ExtensionEnableFlowAborted(false);  // |delegate_| may delete us.
     return;
   }
 
+  // Supervised users can't re-enable custodian-installed extensions.
+  if (profile_->IsSupervised() && extension->was_installed_by_custodian()) {

[benwells, 2015/02/25 03:23:32]

Nit: You should use your cool new function here too.

[Marc Treib, 2015/02/25 09:48:55]

Done.

+    delegate_->ExtensionEnableFlowAborted(false);  // |delegate_| may delete us.
+    return;
+  }
+
   extensions::ExtensionPrefs* prefs = extensions::ExtensionPrefs::Get(profile_);
   if (!prefs->DidExtensionEscalatePermissions(extension_id_)) {
     // Enable the extension immediately if its privileges weren't escalated.
     // This is a no-op if the extension was previously terminated.
     service->EnableExtension(extension_id_);
 
     delegate_->ExtensionEnableFlowFinished();  // |delegate_| may delete us.
     return;
   }
 
@@ skipping 62 matching lines @@
   }
 
   service->GrantPermissionsAndEnableExtension(extension);
   delegate_->ExtensionEnableFlowFinished();  // |delegate_| may delete us.
 }
 
 void ExtensionEnableFlow::InstallUIAbort(bool user_initiated) {
   delegate_->ExtensionEnableFlowAborted(user_initiated);
   // |delegate_| may delete us.
 }