1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/policy/core/common/cloud/affiliation.h"
#include "components/policy/core/common/cloud/cloud_policy_client.h"
#include "components/policy/core/common/cloud/cloud_policy_core.h"
#include "components/policy/core/common/cloud/cloud_policy_store.h"
#include "components/policy/proto/device_management_backend.pb.h"
#if BUILDFLAG(IS_CHROMEOS)
#include "chromeos/ash/components/policy/device_local_account/device_local_account_type.h"
#endif
namespace policy {
bool IsAffiliated(const base::flat_set<std::string>& user_ids,
const base::flat_set<std::string>& device_ids) {
for (const std::string& device_id : device_ids) {
if (user_ids.count(device_id))
return true;
}
return false;
}
bool IsUserAffiliated(const base::flat_set<std::string>& user_affiliation_ids,
const base::flat_set<std::string>& device_affiliation_ids,
std::string_view email) {
// An empty username means incognito user in case of Chrome OS and no
// logged-in user in case of Chrome (SigninService). Many tests use nonsense
// email addresses (e.g. 'test') so treat those as non-enterprise users.
if (email.empty() || email.find('@') == std::string_view::npos) {
return false;
}
#if BUILDFLAG(IS_CHROMEOS)
if (IsDeviceLocalAccountUser(email)) {
return true;
}
#endif
return IsAffiliated(user_affiliation_ids, device_affiliation_ids);
}
base::flat_set<std::string> GetAffiliationIdsFromCore(
const policy::CloudPolicyCore& core,
bool for_device) {
// Validate client.
if (!(core.client() && core.client()->is_registered())) {
// Returns an empty set if the client isn't registered.
return {};
}
// Check that a core with a registered client MUST have a store instance.
CHECK(core.store());
// Validate store.
if (!core.store()->has_policy()) {
// Returns an empty set if there is no policy data in the store.
return {};
}
const auto* policy_data = core.store()->policy();
const auto ids = for_device ? policy_data->device_affiliation_ids()
: policy_data->user_affiliation_ids();
return {ids.begin(), ids.end()};
}
} // namespace policy
|
