Refactor the various ways to control what users can do to extensions.

chrome/browser/extensions/extension_management_apitest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+#include <map>
+
 #include "chrome/browser/extensions/extension_apitest.h"
 #include "chrome/browser/extensions/extension_service.h"
+#include "chrome/browser/extensions/extension_system.h"
 #include "chrome/browser/extensions/extension_test_message_listener.h"
+#include "chrome/browser/extensions/test_management_policy.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/browser_finder.h"
 #include "chrome/browser/ui/browser_list.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/test/base/ui_test_utils.h"
 
+using extensions::Extension;
+
 namespace {
 
 // Find a browser other than |browser|.
 Browser* FindOtherBrowser(Browser* browser) {
   Browser* found = NULL;
   for (BrowserList::const_iterator it = BrowserList::begin();
        it != BrowserList::end(); ++it) {
     if (*it == browser)
       continue;
     found = *it;
   }
 
   return found;
 }
 
 }  // namespace
 
 class ExtensionManagementApiTest : public ExtensionApiTest {
  public:
   virtual void SetUpCommandLine(CommandLine* command_line) {
     ExtensionApiTest::SetUpCommandLine(command_line);
     command_line->AppendSwitch(switches::kEnablePanels);
   }
 
   virtual void InstallExtensions() {
     FilePath basedir = test_data_dir_.AppendASCII("management");
 
     // Load 4 enabled items.
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("enabled_extension")));
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("enabled_app")));
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("description")));
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("permissions")));
+    InstallNamedExtension(basedir, "enabled_extension");
+    InstallNamedExtension(basedir, "enabled_app");
+    InstallNamedExtension(basedir, "description");
+    InstallNamedExtension(basedir, "permissions");
 
     // Load 2 disabled items.
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("disabled_extension")));
-    DisableExtension(last_loaded_extension_id_);
-    ASSERT_TRUE(LoadExtension(basedir.AppendASCII("disabled_app")));
-    DisableExtension(last_loaded_extension_id_);
+    InstallNamedExtension(basedir, "disabled_extension");
+    DisableExtension(extension_ids_["disabled_extension"]);
+    InstallNamedExtension(basedir, "disabled_app");
+    DisableExtension(extension_ids_["disabled_app"]);
   }
 
   // Load an app, and wait for a message from app "management/launch_on_install"
   // indicating that the new app has been launched.
   void LoadAndWaitForLaunch(const std::string& app_path,
                             std::string* out_app_id) {
     ExtensionTestMessageListener launched_app("launched app", false);
     ASSERT_TRUE(LoadExtension(test_data_dir_.AppendASCII(app_path)));
 
     if (out_app_id)
       *out_app_id = last_loaded_extension_id_;
 
     ASSERT_TRUE(launched_app.WaitUntilSatisfied());
   }
+
+ protected:
+  void InstallNamedExtension(FilePath basedir, std::string name) {
+    const Extension* extension = LoadExtension(basedir.AppendASCII(name));
+    ASSERT_TRUE(extension);
+    extension_ids_[name] = extension->id();
+  }
+
+  // Maps installed extension names to their IDs..
+  std::map<std::string, std::string> extension_ids_;
 };
 
 IN_PROC_BROWSER_TEST_F(ExtensionManagementApiTest, Basics) {
   InstallExtensions();
   ASSERT_TRUE(RunExtensionSubtest("management/test", "basics.html"));
 }
 
 IN_PROC_BROWSER_TEST_F(ExtensionManagementApiTest, Uninstall) {
   InstallExtensions();
   ASSERT_TRUE(RunExtensionSubtest("management/test", "uninstall.html"));
 }
 
+// Tests actions on extensions when no management policy is in place.
+IN_PROC_BROWSER_TEST_F(ExtensionManagementApiTest, ManagementPolicyAllowed) {
+  InstallExtensions();
+  ExtensionService* service = browser()->profile()->GetExtensionService();
+  EXPECT_TRUE(service->GetExtensionById(extension_ids_["enabled_extension"],
+                                        false));
+
+  // Ensure that all actions are allowed.
+  ExtensionSystem::Get(
+      browser()->profile())->management_policy()->UnregisterAllProviders();
+
+  ASSERT_TRUE(RunExtensionSubtest("management/management_policy",
+                                  "allowed.html"));
+  // The last thing the test does is uninstall the "enabled_extension".
+  EXPECT_FALSE(service->GetExtensionById(extension_ids_["enabled_extension"],
+                                         true));
+}
+
+// Tests actions on extensions when management policy prohibits those actions.
+IN_PROC_BROWSER_TEST_F(ExtensionManagementApiTest, ManagementPolicyProhibited) {
+  InstallExtensions();
+  ExtensionService* service = browser()->profile()->GetExtensionService();
+  EXPECT_TRUE(service->GetExtensionById(extension_ids_["enabled_extension"],
+                                        false));
+
+  // Prohibit status changes.
+  extensions::ManagementPolicy* policy =
+      ExtensionSystem::Get(browser()->profile())->management_policy();
+  policy->UnregisterAllProviders();
+  extensions::TestManagementPolicyProvider provider(
+    extensions::TestManagementPolicyProvider::PROHIBIT_MODIFY_STATUS);
+  policy->RegisterProvider(&provider);
+  ASSERT_TRUE(RunExtensionSubtest("management/management_policy",
+                                  "prohibited.html"));
+}
+
 IN_PROC_BROWSER_TEST_F(ExtensionManagementApiTest, LaunchPanelApp) {
   ExtensionService* service = browser()->profile()->GetExtensionService();
 
   // Load an extension that calls launchApp() on any app that gets
   // installed.
   ExtensionTestMessageListener launcher_loaded("launcher loaded", false);
   ASSERT_TRUE(LoadExtension(
       test_data_dir_.AppendASCII("management/launch_on_install")));
   ASSERT_TRUE(launcher_loaded.WaitUntilSatisfied());
 
@@ skipping 89 matching lines @@
   ASSERT_EQ(2, browser()->tab_count());
 #else
   // Find the app's browser.  Opening in a new window will create
   // a new browser.
   ASSERT_EQ(2u, browser::GetBrowserCount(browser()->profile()));
   Browser* app_browser = FindOtherBrowser(browser());
   ASSERT_TRUE(app_browser->is_app());
   ASSERT_FALSE(app_browser->is_type_panel());
 #endif
 }