OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ | 5 #ifndef CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ |
6 #define CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ | 6 #define CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ |
7 | 7 |
8 #include <set> | 8 #include <set> |
9 #include <string> | 9 #include <string> |
10 #include <vector> | 10 #include <vector> |
11 | 11 |
12 #include "base/callback.h" | 12 #include "base/callback.h" |
13 #include "base/compiler_specific.h" | 13 #include "base/compiler_specific.h" |
| 14 #include "base/gtest_prod_util.h" |
14 #include "base/memory/scoped_ptr.h" | 15 #include "base/memory/scoped_ptr.h" |
15 #include "base/memory/singleton.h" | 16 #include "base/memory/singleton.h" |
16 #include "chrome/browser/extensions/management_policy.h" | |
17 #include "chrome/browser/ui/browser_list_observer.h" | 17 #include "chrome/browser/ui/browser_list_observer.h" |
18 #include "content/public/browser/notification_observer.h" | 18 #include "content/public/browser/notification_observer.h" |
19 #include "content/public/browser/notification_registrar.h" | 19 #include "content/public/browser/notification_registrar.h" |
20 | 20 |
21 class Browser; | 21 class Browser; |
22 template<typename T> | 22 template<typename T> |
23 struct DefaultSingletonTraits; | 23 struct DefaultSingletonTraits; |
24 class ManagedModeSiteList; | 24 class ManagedModeSiteList; |
25 class ManagedModeURLFilter; | 25 class ManagedModeURLFilter; |
26 class PrefChangeRegistrar; | 26 class PrefChangeRegistrar; |
27 class PrefServiceSimple; | 27 class PrefServiceSimple; |
28 class PrefServiceSyncable; | 28 class PrefServiceSyncable; |
29 class Profile; | 29 class Profile; |
30 | 30 |
31 namespace policy{ | 31 namespace policy { |
32 class URLBlacklist; | 32 class URLBlacklist; |
33 } | 33 } |
34 | 34 |
35 // Managed mode allows one person to manage the Chrome experience for another | 35 // Managed mode locks the UI to a certain managed user profile, preventing the |
36 // person by pre-configuring and then locking a managed User profile. | 36 // user from accessing other profiles. |
37 // The ManagedMode class provides methods to check whether the browser is in | 37 // The ManagedMode class provides methods to check whether the browser is in |
38 // managed mode, and to attempt to enter or leave managed mode. | 38 // managed mode, and to attempt to enter or leave managed mode. |
39 // Except where otherwise noted, this class should be used on the UI thread. | 39 // Except where otherwise noted, this class should be used on the UI thread. |
40 class ManagedMode : public chrome::BrowserListObserver, | 40 class ManagedMode : public chrome::BrowserListObserver, |
41 public extensions::ManagementPolicy::Provider, | |
42 public content::NotificationObserver { | 41 public content::NotificationObserver { |
43 public: | 42 public: |
44 typedef base::Callback<void(bool)> EnterCallback; | 43 typedef base::Callback<void(bool)> EnterCallback; |
45 | 44 |
46 static void RegisterPrefs(PrefServiceSimple* prefs); | 45 static void RegisterPrefs(PrefServiceSimple* prefs); |
47 static void RegisterUserPrefs(PrefServiceSyncable* prefs); | |
48 | 46 |
49 // Initializes the singleton, setting the managed_profile_. Must be called | 47 // Initializes the singleton, setting the managed_profile_. Must be called |
50 // after g_browser_process and the LocalState have been created. | 48 // after g_browser_process and the LocalState have been created. |
51 static void Init(Profile* profile); | 49 static void Init(Profile* profile); |
52 static bool IsInManagedMode(); | 50 static bool IsInManagedMode(); |
53 | 51 |
54 // Calls |callback| with the argument true iff managed mode was entered | 52 // Calls |callback| with the argument true iff managed mode was entered |
55 // sucessfully. | 53 // sucessfully. |
56 static void EnterManagedMode(Profile* profile, const EnterCallback& callback); | 54 static void EnterManagedMode(Profile* profile, const EnterCallback& callback); |
57 static void LeaveManagedMode(); | 55 static void LeaveManagedMode(); |
58 | 56 |
59 // Returns the URL filter for the IO thread, for filtering network requests | |
60 // (in ChromeNetworkDelegate). | |
61 // This method should only be called on the IO thread. | |
62 static const ManagedModeURLFilter* GetURLFilterForIOThread(); | |
63 | |
64 // Returns the URL filter for the UI thread, for filtering navigations and | |
65 // classifying sites in the history view. | |
66 // This method should only be called on the UI thread. | |
67 static const ManagedModeURLFilter* GetURLFilterForUIThread(); | |
68 | |
69 // The functions that handle manual whitelists use |url_pattern| or lists | |
70 // of "url patterns". An "url pattern" is a pattern in the format used by the | |
71 // policy::URLBlacklist filter. A description of the format used can be found | |
72 // here: http://dev.chromium.org/administrators/url-blacklist-filter-format. | |
73 // They all receive the |is_whitelist| parameter which dictates whether they | |
74 // act on the whitelist (for |is_whitelist| == true) or on the blacklist (for | |
75 // |is_whitelist| == false). | |
76 | |
77 // Checks if the |url_pattern| is in the manual whitelist. | |
78 static bool IsInManualList(const bool is_whitelist, | |
79 const std::string& url_pattern); | |
80 | |
81 // Appends |list| to the manual white/black list (according to |is_whitelist|) | |
82 // both in URL filter and in preferences. | |
83 static void AddToManualList(const bool is_whitelist, | |
84 const base::ListValue& list); | |
85 | |
86 // Removes |list| from the manual white/black list (according to | |
87 // |is_whitelist|) both in URL filter and in preferences. | |
88 static void RemoveFromManualList(const bool is_whitelist, | |
89 const base::ListValue& list); | |
90 | |
91 // Updates the whitelist and the blacklist from the prefs. | |
92 static void UpdateManualLists(); | |
93 | |
94 // Returns the profile blacklist. | |
95 static scoped_ptr<base::ListValue> GetBlacklist(); | |
96 | |
97 // ExtensionManagementPolicy::Provider implementation: | |
98 virtual std::string GetDebugPolicyProviderName() const OVERRIDE; | |
99 virtual bool UserMayLoad(const extensions::Extension* extension, | |
100 string16* error) const OVERRIDE; | |
101 virtual bool UserMayModifySettings(const extensions::Extension* extension, | |
102 string16* error) const OVERRIDE; | |
103 | |
104 // chrome::BrowserListObserver implementation: | 57 // chrome::BrowserListObserver implementation: |
105 virtual void OnBrowserAdded(Browser* browser) OVERRIDE; | 58 virtual void OnBrowserAdded(Browser* browser) OVERRIDE; |
106 virtual void OnBrowserRemoved(Browser* browser) OVERRIDE; | 59 virtual void OnBrowserRemoved(Browser* browser) OVERRIDE; |
107 | 60 |
108 // content::NotificationObserver implementation: | 61 // content::NotificationObserver implementation: |
109 virtual void Observe(int type, | 62 virtual void Observe(int type, |
110 const content::NotificationSource& source, | 63 const content::NotificationSource& source, |
111 const content::NotificationDetails& details) OVERRIDE; | 64 const content::NotificationDetails& details) OVERRIDE; |
112 | 65 |
113 protected: | 66 protected: |
114 ManagedMode(); | 67 ManagedMode(); |
115 virtual ~ManagedMode(); | 68 virtual ~ManagedMode(); |
116 void EnterManagedModeImpl(Profile* profile, const EnterCallback& callback); | 69 void EnterManagedModeImpl(Profile* profile, const EnterCallback& callback); |
117 | 70 |
118 // The managed profile. This is NULL iff we are not in managed mode. | 71 // The managed profile. This is NULL iff we are not in managed mode. |
119 Profile* managed_profile_; | 72 Profile* managed_profile_; |
120 | 73 |
121 private: | 74 private: |
122 class URLFilterContext; | |
123 | |
124 friend class Singleton<ManagedMode, LeakySingletonTraits<ManagedMode> >; | 75 friend class Singleton<ManagedMode, LeakySingletonTraits<ManagedMode> >; |
125 friend struct DefaultSingletonTraits<ManagedMode>; | 76 friend struct DefaultSingletonTraits<ManagedMode>; |
126 FRIEND_TEST_ALL_PREFIXES(ExtensionApiTest, ManagedModeOnChange); | 77 FRIEND_TEST_ALL_PREFIXES(ExtensionApiTest, ManagedModeOnChange); |
127 FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest, | 78 FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest, |
128 ManagedModeProhibitsModification); | 79 ManagedModeProhibitsModification); |
129 FRIEND_TEST_ALL_PREFIXES(ManagedModeContentPackTest, InstallContentPacks); | 80 FRIEND_TEST_ALL_PREFIXES(ManagedModeContentPackTest, InstallContentPacks); |
130 | 81 |
131 static ManagedMode* GetInstance(); | 82 static ManagedMode* GetInstance(); |
132 | 83 |
133 virtual void InitImpl(Profile* profile); | 84 virtual void InitImpl(Profile* profile); |
134 | 85 |
135 // Internal implementation for ExtensionManagementPolicy::Delegate methods. | |
136 // If |error| is not NULL, it will be filled with an error message if the | |
137 // requested extension action (install, modify status, etc.) is not permitted. | |
138 bool ExtensionManagementPolicyImpl(string16* error) const; | |
139 | |
140 void LeaveManagedModeImpl(); | 86 void LeaveManagedModeImpl(); |
141 | 87 |
142 ManagedModeURLFilter* GetURLFilterForIOThreadImpl(); | |
143 ManagedModeURLFilter* GetURLFilterForUIThreadImpl(); | |
144 | |
145 void FinalizeEnter(bool result); | 88 void FinalizeEnter(bool result); |
146 | 89 |
147 // Platform-specific methods that confirm whether we can enter or leave | 90 // Platform-specific methods that confirm whether we can enter or leave |
148 // managed mode. | 91 // managed mode. |
149 virtual bool PlatformConfirmEnter(); | 92 virtual bool PlatformConfirmEnter(); |
150 virtual bool PlatformConfirmLeave(); | 93 virtual bool PlatformConfirmLeave(); |
151 | 94 |
152 virtual bool IsInManagedModeImpl() const; | 95 virtual bool IsInManagedModeImpl() const; |
153 | 96 |
154 // Enables or disables managed mode and registers or unregisters it with the | 97 // Enables or disables managed mode and registers or unregisters it with the |
155 // ManagementPolicy. If |newly_managed_profile| is NULL, managed mode will | 98 // ManagementPolicy. If |newly_managed_profile| is NULL, managed mode will |
156 // be disabled. Otherwise, managed mode will be enabled for that profile | 99 // be disabled. Otherwise, managed mode will be enabled for that profile |
157 // (typically |managed_profile_|, but other values are possible during | 100 // (typically |managed_profile_|, but other values are possible during |
158 // testing). | 101 // testing). |
159 virtual void SetInManagedMode(Profile* newly_managed_profile); | 102 virtual void SetInManagedMode(Profile* newly_managed_profile); |
160 | 103 |
161 // Returns a list of all installed and enabled site lists in the current | |
162 // managed profile. | |
163 // This method should only be called if managed mode is active. | |
164 ScopedVector<ManagedModeSiteList> GetActiveSiteLists(); | |
165 | |
166 void OnDefaultFilteringBehaviorChanged(); | |
167 | |
168 void UpdateManualListsImpl(); | |
169 | |
170 // Returns a copy of the manual whitelist which is stored in each profile. | |
171 scoped_ptr<base::ListValue> GetWhitelist(); | |
172 | |
173 // The following functions use |is_whitelist| to select between the whitelist | |
174 // and the blacklist as the target of the function. If |is_whitelist| is true | |
175 // |url_pattern| is added to the whitelist, otherwise it is added to the | |
176 // blacklist. | |
177 | |
178 void RemoveFromManualListImpl(const bool is_whitelist, | |
179 const base::ListValue& whitelist); | |
180 | |
181 // Adds the |url_pattern| to the manual lists in the URL filter. This is used | |
182 // by AddToManualListImpl(). | |
183 void AddURLPatternToManualList(const bool is_whitelist, | |
184 const std::string& url_pattern); | |
185 | |
186 void AddToManualListImpl(const bool is_whitelist, | |
187 const base::ListValue& whitelist); | |
188 | |
189 bool IsInManualListImpl(const bool is_whitelist, | |
190 const std::string& url_pattern); | |
191 | |
192 content::NotificationRegistrar registrar_; | 104 content::NotificationRegistrar registrar_; |
193 scoped_ptr<PrefChangeRegistrar> pref_change_registrar_; | |
194 | |
195 scoped_ptr<URLFilterContext> io_url_filter_context_; | |
196 scoped_ptr<URLFilterContext> ui_url_filter_context_; | |
197 | |
198 std::set<Browser*> browsers_to_close_; | 105 std::set<Browser*> browsers_to_close_; |
199 std::vector<EnterCallback> callbacks_; | 106 std::vector<EnterCallback> callbacks_; |
200 | 107 |
201 DISALLOW_COPY_AND_ASSIGN(ManagedMode); | 108 DISALLOW_COPY_AND_ASSIGN(ManagedMode); |
202 }; | 109 }; |
203 | 110 |
204 #endif // CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ | 111 #endif // CHROME_BROWSER_MANAGED_MODE_MANAGED_MODE_H_ |
OLD | NEW |