1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
|
// Copyright (c) 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/policy/profile_policy_connector.h"
#include <vector>
#include "base/bind.h"
#include "base/logging.h"
#include "base/values.h"
#include "chrome/browser/browser_process.h"
#include "components/policy/core/browser/browser_policy_connector.h"
#include "components/policy/core/common/cloud/cloud_policy_core.h"
#include "components/policy/core/common/cloud/cloud_policy_manager.h"
#include "components/policy/core/common/cloud/cloud_policy_store.h"
#include "components/policy/core/common/configuration_policy_provider.h"
#include "components/policy/core/common/policy_service_impl.h"
#include "components/policy/core/common/schema_registry_tracking_policy_provider.h"
#include "google_apis/gaia/gaia_auth_util.h"
#if defined(OS_CHROMEOS)
#include "chrome/browser/chromeos/policy/browser_policy_connector_chromeos.h"
#include "chrome/browser/chromeos/policy/device_cloud_policy_manager_chromeos.h"
#include "chrome/browser/chromeos/policy/device_local_account_policy_provider.h"
#include "chrome/browser/chromeos/policy/login_profile_policy_provider.h"
#include "components/user_manager/user.h"
#include "components/user_manager/user_manager.h"
#endif
namespace policy {
namespace {
bool HasChromePolicy(ConfigurationPolicyProvider* provider,
const char* name) {
if (!provider)
return false;
PolicyNamespace chrome_ns(POLICY_DOMAIN_CHROME, "");
return provider->policies().Get(chrome_ns).Get(name) != NULL;
}
} // namespace
ProfilePolicyConnector::ProfilePolicyConnector()
#if defined(OS_CHROMEOS)
: is_primary_user_(false),
user_cloud_policy_manager_(NULL)
#else
: user_cloud_policy_manager_(NULL)
#endif
{}
ProfilePolicyConnector::~ProfilePolicyConnector() {}
void ProfilePolicyConnector::Init(
bool force_immediate_load,
#if defined(OS_CHROMEOS)
const user_manager::User* user,
#endif
SchemaRegistry* schema_registry,
CloudPolicyManager* user_cloud_policy_manager) {
user_cloud_policy_manager_ = user_cloud_policy_manager;
// |providers| contains a list of the policy providers available for the
// PolicyService of this connector, in decreasing order of priority.
//
// Note: all the providers appended to this vector must eventually become
// initialized for every policy domain, otherwise some subsystems will never
// use the policies exposed by the PolicyService!
// The default ConfigurationPolicyProvider::IsInitializationComplete()
// result is true, so take care if a provider overrides that.
//
// Note: if you append a new provider then make sure IsPolicyFromCloudPolicy()
// is also updated below.
std::vector<ConfigurationPolicyProvider*> providers;
#if defined(OS_CHROMEOS)
BrowserPolicyConnectorChromeOS* connector =
g_browser_process->platform_part()->browser_policy_connector_chromeos();
#else
BrowserPolicyConnector* connector =
g_browser_process->browser_policy_connector();
#endif
if (connector->GetPlatformProvider()) {
wrapped_platform_policy_provider_.reset(
new SchemaRegistryTrackingPolicyProvider(
connector->GetPlatformProvider()));
wrapped_platform_policy_provider_->Init(schema_registry);
providers.push_back(wrapped_platform_policy_provider_.get());
}
#if defined(OS_CHROMEOS)
if (connector->GetDeviceCloudPolicyManager())
providers.push_back(connector->GetDeviceCloudPolicyManager());
#endif
if (user_cloud_policy_manager)
providers.push_back(user_cloud_policy_manager);
#if defined(OS_CHROMEOS)
if (!user) {
DCHECK(schema_registry);
// This case occurs for the signin profile.
special_user_policy_provider_.reset(
new LoginProfilePolicyProvider(connector->GetPolicyService()));
} else {
// |user| should never be NULL except for the signin profile.
is_primary_user_ =
user == user_manager::UserManager::Get()->GetPrimaryUser();
special_user_policy_provider_ = DeviceLocalAccountPolicyProvider::Create(
user->email(),
connector->GetDeviceLocalAccountPolicyService());
}
if (special_user_policy_provider_) {
special_user_policy_provider_->Init(schema_registry);
providers.push_back(special_user_policy_provider_.get());
}
#endif
policy_service_.reset(new PolicyServiceImpl(providers));
#if defined(OS_CHROMEOS)
if (is_primary_user_) {
if (user_cloud_policy_manager)
connector->SetUserPolicyDelegate(user_cloud_policy_manager);
else if (special_user_policy_provider_)
connector->SetUserPolicyDelegate(special_user_policy_provider_.get());
}
#endif
}
void ProfilePolicyConnector::InitForTesting(scoped_ptr<PolicyService> service) {
policy_service_ = service.Pass();
}
void ProfilePolicyConnector::Shutdown() {
#if defined(OS_CHROMEOS)
BrowserPolicyConnectorChromeOS* connector =
g_browser_process->platform_part()->browser_policy_connector_chromeos();
if (is_primary_user_)
connector->SetUserPolicyDelegate(NULL);
if (special_user_policy_provider_)
special_user_policy_provider_->Shutdown();
#endif
if (wrapped_platform_policy_provider_)
wrapped_platform_policy_provider_->Shutdown();
}
bool ProfilePolicyConnector::IsManaged() const {
return !GetManagementDomain().empty();
}
std::string ProfilePolicyConnector::GetManagementDomain() const {
if (!user_cloud_policy_manager_)
return "";
CloudPolicyStore* store = user_cloud_policy_manager_->core()->store();
if (store && store->is_managed() && store->policy()->has_username())
return gaia::ExtractDomainName(store->policy()->username());
return "";
}
bool ProfilePolicyConnector::IsPolicyFromCloudPolicy(const char* name) const {
if (!HasChromePolicy(user_cloud_policy_manager_, name))
return false;
// Check all the providers that have higher priority than the
// |user_cloud_policy_manager_|. These checks must be kept in sync with the
// order of the providers in Init().
if (HasChromePolicy(wrapped_platform_policy_provider_.get(), name))
return false;
#if defined(OS_CHROMEOS)
BrowserPolicyConnectorChromeOS* connector =
g_browser_process->platform_part()->browser_policy_connector_chromeos();
if (HasChromePolicy(connector->GetDeviceCloudPolicyManager(), name))
return false;
#endif
return true;
}
} // namespace policy
|
