1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
// Copyright 2013 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/profiles/incognito_mode_policy_handler.h"
#include "base/command_line.h"
#include "base/notreached.h"
#include "base/strings/string_number_conversions.h"
#include "base/values.h"
#include "build/build_config.h"
#include "chrome/browser/prefs/incognito_mode_prefs.h"
#include "chrome/credential_provider/common/gcp_strings.h"
#include "components/policy/core/browser/policy_error_map.h"
#include "components/policy/core/common/policy_map.h"
#include "components/policy/core/common/policy_pref_names.h"
#include "components/policy/policy_constants.h"
#include "components/prefs/pref_value_map.h"
#include "components/strings/grit/components_strings.h"
namespace policy {
IncognitoModePolicyHandler::IncognitoModePolicyHandler() = default;
IncognitoModePolicyHandler::~IncognitoModePolicyHandler() = default;
bool IncognitoModePolicyHandler::CheckPolicySettings(const PolicyMap& policies,
PolicyErrorMap* errors) {
// It is safe to use `GetValueUnsafe()` because type checking is performed
// before the value is used.
const base::Value* availability =
policies.GetValueUnsafe(key::kIncognitoModeAvailability);
if (availability) {
if (!availability->is_int()) {
errors->AddError(key::kIncognitoModeAvailability, IDS_POLICY_TYPE_ERROR,
base::Value::GetTypeName(base::Value::Type::INTEGER));
return false;
}
policy::IncognitoModeAvailability availability_enum_value;
if (!IncognitoModePrefs::IntToAvailability(availability->GetInt(),
&availability_enum_value)) {
errors->AddError(key::kIncognitoModeAvailability,
IDS_POLICY_OUT_OF_RANGE_ERROR,
base::NumberToString(availability->GetInt()));
return false;
}
return true;
}
// It is safe to use `GetValueUnsafe()` because type checking is performed
// before the value is used.
const base::Value* deprecated_enabled =
policies.GetValueUnsafe(key::kIncognitoEnabled);
if (deprecated_enabled && !deprecated_enabled->is_bool()) {
errors->AddError(key::kIncognitoEnabled, IDS_POLICY_TYPE_ERROR,
base::Value::GetTypeName(base::Value::Type::BOOLEAN));
return false;
}
return true;
}
void IncognitoModePolicyHandler::ApplyPolicySettings(const PolicyMap& policies,
PrefValueMap* prefs) {
#if BUILDFLAG(IS_WIN)
// When browser starts with GCPW sign-in flag, it runs in incognito mode and
// gaia login page is loaded. With this flag, user can't use Chrome normally.
// However GCPW can't work in non-incognito mode and policy setting prevents
// Chrome from launching in incognito mode.To make this work, we should ignore
// setting inconito mode policy if GCPW sign-in flag is present.
if (base::CommandLine::ForCurrentProcess()->HasSwitch(
::credential_provider::kGcpwSigninSwitch))
return;
#endif
const base::Value* availability = policies.GetValue(
key::kIncognitoModeAvailability, base::Value::Type::INTEGER);
const base::Value* deprecated_enabled =
policies.GetValue(key::kIncognitoEnabled, base::Value::Type::BOOLEAN);
if (availability) {
policy::IncognitoModeAvailability availability_enum_value;
if (IncognitoModePrefs::IntToAvailability(availability->GetInt(),
&availability_enum_value)) {
prefs->SetInteger(policy::policy_prefs::kIncognitoModeAvailability,
static_cast<int>(availability_enum_value));
}
} else if (deprecated_enabled) {
// If kIncognitoModeAvailability is not specified, check the obsolete
// kIncognitoEnabled.
prefs->SetInteger(
policy::policy_prefs::kIncognitoModeAvailability,
static_cast<int>(deprecated_enabled->GetBool()
? policy::IncognitoModeAvailability::kEnabled
: policy::IncognitoModeAvailability::kDisabled));
}
}
} // namespace policy
|
