Add a lock to the managed user settings page and require authentication for unlocking.

chrome/common/pref_names.cc

Index: chrome/common/pref_names.cc
diff --git a/chrome/common/pref_names.cc b/chrome/common/pref_names.cc
index 174bb0804ec735cc75d6177b9ca590812ee7fefc..bd74bd5c5e66a99560684723aa1dd1f367b59e15 100644
--- a/chrome/common/pref_names.cc
+++ b/chrome/common/pref_names.cc
@@ -2074,6 +2074,13 @@ const char kManagedNotificationsBlockedForUrls[] =
 const char kManagedAutoSelectCertificateForUrls[] =
     "profile.managed_auto_select_certificate_for_urls";
 
+// This preference is used to store the hash of a password of the custodian of

[Pam (message me for reviews), 2013/01/14 15:37:50]

This should go up with the white-/blacklist prefs.

[Adrian Kuegel, 2013/01/19 01:21:32]

Done.

+// a managed user. It allows to unlock options which should be not available to
+// the managed user. The salt preference is used to derive the hash from the
+// password.
+const char kManagedModeLocalPassphrase[] = "managed_mode.passphrase";
+const char kManagedModeLocalSalt[] = "managed_mode.salt";
+
 // Set to true if the user created a login item so we should not modify it when
 // uninstalling background apps.
 const char kUserCreatedLoginItem[] = "background_mode.user_created_login_item";