From 306a2bd6e1bdabbe0cb5a70e17fe9a3eee08b5f9 Mon Sep 17 00:00:00 2001
From: "finnur@chromium.org"
 <finnur@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>
Date: Wed, 11 Aug 2010 14:56:36 +0000
Subject: Implement admin control (by policy) over which extensions the user
 can install and run. Currently we intercept in two locations:

1) When the user tries to install an extension (includes error message).
2) Every time the browser starts up and the currently installed extensions are loaded (silently skips the extension).

I implemented a whitelist and a blacklist approach, calling it a allow/deny list to not clash with the global blacklist we have for extensions. A blacklist of '*' means all extensions are blacklisted. If an extension is on the blacklist it cannot be installed/loaded, unless it also appears on the whitelist.

I also fleshed out the LIST_TYPE support for policy values, so that we don't have to use comma separated REG_SZ values for lists and can instead use ADM support for listboxes.

BUG=47085
TEST=ExtensionsServiceTest.BlacklistedByPolicyWillNotInstall, ConfigurationPolicyProviderWinTest.TestExtensionInstall*

Review URL: http://codereview.chromium.org/3014053

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@55727 0039d316-1c4b-4281-b951-d872f2087c98
---
 chrome/common/pref_names.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'chrome/common/pref_names.h')

diff --git a/chrome/common/pref_names.h b/chrome/common/pref_names.h
index 61e87bf..1e20e76 100644
--- a/chrome/common/pref_names.h
+++ b/chrome/common/pref_names.h
@@ -299,8 +299,8 @@ extern const char kDisableExtensions[];
 extern const char kShowExtensionShelf[];
 extern const char kBrowserActionContainerWidth[];
 
-extern const char kLastExtensionsUpdateCheck[];
-extern const char kNextExtensionsUpdateCheck[];
+extern const char kExtensionInstallAllowList[];
+extern const char kExtensionInstallDenyList[];
 
 extern const char kExtensionBlacklistUpdateVersion[];
 
-- 
cgit v1.1