| // Copyright 2020 The Chromium Authors |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_ |
| #define CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_ |
| |
| #include "base/memory/raw_ptr.h" |
| #include "base/scoped_observation.h" |
| #include "components/prefs/pref_change_registrar.h" |
| #include "components/prefs/pref_registry_simple.h" |
| #include "extensions/browser/extension_registry.h" |
| #include "extensions/browser/extension_registry_observer.h" |
| #include "extensions/common/extension.h" |
| |
| namespace content { |
| class BrowserContext; |
| } |
| |
| namespace extensions { |
| |
| // Returns true if the |extension_id| is allowed in managed guest sessions. |
| bool IsAllowlistedForManagedGuestSession(const std::string& extension_id); |
| |
| // Used to track the installation of the force-installed extensions of the |
| // managed-guest session to decide whether the permissions of the extensions |
| // should trigger the full warning on the login screen or not. The result is |
| // saved in the local state perf, and the login screen warning of the managed |
| // guest session is updated accordingly. ExtensionSystemImpl owns this class and |
| // outlives it. |
| class ExtensionsPermissionsTracker : public ExtensionRegistryObserver { |
| public: |
| ExtensionsPermissionsTracker(ExtensionRegistry* registry, |
| content::BrowserContext* browser_context); |
| ExtensionsPermissionsTracker(const ExtensionsPermissionsTracker&) = delete; |
| ExtensionsPermissionsTracker& operator=(const ExtensionsPermissionsTracker&) = |
| delete; |
| ~ExtensionsPermissionsTracker() override; |
| |
| static void RegisterLocalStatePrefs(PrefRegistrySimple* registry); |
| |
| // ExtensionRegistryObserver overrides: |
| void OnExtensionLoaded(content::BrowserContext* browser_context, |
| const Extension* extension) override; |
| |
| protected: |
| virtual bool IsSafePerms(const PermissionsData* perms_data) const; |
| |
| private: |
| // Loads list of force-installed extensions if it's available. |
| void OnForcedExtensionsPrefChanged(); |
| |
| void UpdateLocalState(); |
| void ParseExtensionPermissions(const Extension* extension); |
| |
| // Unowned, but guaranteed to outlive this object. |
| raw_ptr<ExtensionRegistry> registry_; |
| |
| // Unowned, but guaranteed to outlive this object. |
| raw_ptr<PrefService> pref_service_; |
| |
| PrefChangeRegistrar pref_change_registrar_; |
| |
| // // Whether the extension is considered "safe". If any extension is not, it |
| // will result in the full warning being shown on the login screen. |
| std::map<ExtensionId, bool> extension_safety_ratings_; |
| |
| // Set of not yet loaded force installed extensions. |
| std::set<ExtensionId> pending_forced_extensions_; |
| |
| base::ScopedObservation<ExtensionRegistry, ExtensionRegistryObserver> |
| observation_{this}; |
| }; |
| |
| } // namespace extensions |
| |
| #endif // CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_ |