cloud_policy_browsertest.cc revision 868fa2fe829687343ffae624259930155e16dbd8
12a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 22a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 32a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// found in the LICENSE file. 42a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 52a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/command_line.h" 62a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/file_util.h" 72a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/file_path.h" 82a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/files/scoped_temp_dir.h" 92a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/memory/scoped_ptr.h" 102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/path_service.h" 112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/prefs/pref_service.h" 122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "base/run_loop.h" 13868fa2fe829687343ffae624259930155e16dbd8Torne (Richard Coles)#include "base/strings/stringprintf.h" 142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/browser_process.h" 152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/browser_policy_connector.h" 162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/cloud_policy_client.h" 172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/cloud_policy_constants.h" 182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/mock_cloud_policy_client.h" 192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/policy_map.h" 202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/policy_service.h" 21c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector.h" 22c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/policy/profile_policy_connector_factory.h" 232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test/local_policy_test_server.h" 242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/test_utils.h" 252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/profiles/profile.h" 262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/ui/browser.h" 272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/common/chrome_notification_types.h" 282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/common/chrome_switches.h" 292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/test/base/in_process_browser_test.h" 302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/browser_thread.h" 312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_service.h" 322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/browser/notification_source.h" 332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "content/public/test/test_utils.h" 342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "googleurl/src/gurl.h" 352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/policy_constants.h" 362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/chrome_settings.pb.h" 372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "policy/proto/cloud_policy.pb.h" 382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gmock/include/gmock/gmock.h" 392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "testing/gtest/include/gtest/gtest.h" 402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/login/user_manager.h" 432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_chromeos.h" 44c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.h" 45c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#include "chromeos/chromeos_paths.h" 46a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles)#include "chromeos/dbus/cryptohome_client.h" 472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager.h" 492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/policy/cloud/user_cloud_policy_manager_factory.h" 502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager.h" 512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#include "chrome/browser/signin/signin_manager_factory.h" 522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::AnyNumber; 552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::InvokeWithoutArgs; 562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Mock; 572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::Return; 582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)using testing::_; 592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace em = enterprise_management; 612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace policy { 632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)namespace { 652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)const char* GetTestUser() { 672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return chromeos::UserManager::kStubUser; 692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return "user@example.com"; 712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetEmptyPolicy() { 752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kEmptyPolicy[] = 762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {}," 792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {}" 802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": 0" 842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf( 872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) kEmptyPolicy, dm_protocol::kChromeUserPolicyType, GetTestUser()); 882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)std::string GetTestPolicy(int key_version) { 912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) const char kTestPolicy[] = 922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "{" 932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"%s\": {" 942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"mandatory\": {" 952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"ShowHomeButton\": true," 96c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) " \"RestoreOnStartup\": 4," 972a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"URLBlacklist\": [ \"dev.chromium.org\", \"youtube.com\" ]" 982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"recommended\": {" 1002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"HomepageLocation\": \"google.com\"" 1012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }" 1022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " }," 1032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"managed_users\": [ \"*\" ]," 1042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"policy_user\": \"%s\"," 1052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) " \"current_key_index\": %d" 1062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "}"; 1072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return base::StringPrintf(kTestPolicy, 1092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) dm_protocol::kChromeUserPolicyType, 1102a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetTestUser(), 1112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key_version); 1122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)void GetExpectedTestPolicy(PolicyMap* expected) { 1152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set(key::kShowHomeButton, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::Value::CreateBooleanValue(true)); 117c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) expected->Set(key::kRestoreOnStartup, POLICY_LEVEL_MANDATORY, 118c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateIntegerValue(4)); 1192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ListValue list; 1202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("dev.chromium.org"); 1212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.AppendString("youtube.com"); 1222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kURLBlacklist, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER, 1242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list.DeepCopy()); 1252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) expected->Set( 1262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) key::kHomepageLocation, POLICY_LEVEL_RECOMMENDED, 1272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) POLICY_SCOPE_USER, base::Value::CreateStringValue("google.com")); 1282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 1292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace 1312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)// Tests the cloud policy stack(s). 1332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)class CloudPolicyTest : public InProcessBrowserTest { 1342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) protected: 1352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CloudPolicyTest() {} 1362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual ~CloudPolicyTest() {} 1372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpInProcessBrowserTestFixture() OVERRIDE { 1392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(temp_dir_.CreateUniqueTempDir()); 1402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetEmptyPolicy())); 1412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) test_server_.reset(new LocalPolicyTestServer(policy_file_path())); 1432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(test_server_->Start()); 1442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string url = test_server_->GetServiceURL().spec(); 1462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) CommandLine* command_line = CommandLine::ForCurrentProcess(); 1482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) command_line->AppendSwitchASCII(switches::kDeviceManagementUrl, url); 1492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 1502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) virtual void SetUpOnMainThread() OVERRIDE { 1522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(PolicyServiceIsEmpty(g_browser_process->policy_service())) 1532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) << "Pre-existing policies in this machine will make this test fail."; 1542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) BrowserPolicyConnector* connector = 1562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) g_browser_process->browser_policy_connector(); 1572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->ScheduleServiceInitialization(0); 1582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 1602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerChromeOS* policy_manager = 161c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) UserCloudPolicyManagerFactoryChromeOS::GetForProfile( 162c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) browser()->profile()); 1632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 1642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#else 1652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Mock a signed-in user. This is used by the UserCloudPolicyStore to pass 1662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // the username to the UserCloudPolicyValidator. 1672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManager* signin_manager = 1682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) SigninManagerFactory::GetForProfile(browser()->profile()); 1692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(signin_manager); 1702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) signin_manager->SetAuthenticatedUsername(GetTestUser()); 1712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager* policy_manager = 1732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManagerFactory::GetForProfile(browser()->profile()); 1742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager); 1752a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->Connect(g_browser_process->local_state(), 1762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) UserCloudPolicyManager::CreateCloudPolicyClient( 1772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) connector->device_management_service()).Pass()); 1782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif // defined(OS_CHROMEOS) 1792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(policy_manager->core()->client()); 1812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 1822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) MockCloudPolicyClientObserver observer; 1832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_CALL(observer, OnRegistrationStateChanged(_)).WillOnce( 1842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) InvokeWithoutArgs(&run_loop, &base::RunLoop::Quit)); 1852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->AddObserver(&observer); 1862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 1872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Give a bogus OAuth token to the |policy_manager|. This should make its 1882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // CloudPolicyClient fetch the DMToken. 189c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ASSERT_FALSE(policy_manager->core()->client()->is_registered()); 190c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::Type registration_type = 191c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#if defined(OS_CHROMEOS) 192c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::USER; 193c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#else 194c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) em::DeviceRegisterRequest::BROWSER; 195c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles)#endif 196c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) policy_manager->core()->client()->Register( 19790dce4d38c5ff5333bea97d859d4e484e27edf0cTorne (Richard Coles) registration_type, "bogus", std::string(), false, std::string()); 1982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 1992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) Mock::VerifyAndClearExpectations(&observer); 2002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_manager->core()->client()->RemoveObserver(&observer); 201c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) EXPECT_TRUE(policy_manager->core()->client()->is_registered()); 2022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 204a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) // Get the path to the user policy key file. 205a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_dir; 206a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) ASSERT_TRUE( 207a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) PathService::Get(chromeos::DIR_USER_POLICY_KEYS, &user_policy_key_dir)); 208a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) std::string sanitized_username = 209a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) chromeos::CryptohomeClient::GetStubSanitizedUsername(GetTestUser()); 210a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) user_policy_key_file_ = user_policy_key_dir.AppendASCII(sanitized_username) 211a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) .AppendASCII("policy.pub"); 2122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 213a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) } 2142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 215c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* GetPolicyService() { 216c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnector* profile_connector = 217c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) ProfilePolicyConnectorFactory::GetForProfile(browser()->profile()); 218c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) return profile_connector->policy_service(); 219c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) } 220c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) 2212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) void SetServerPolicy(const std::string& policy) { 2222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) int result = file_util::WriteFile(policy_file_path(), policy.data(), 2232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy.size()); 2242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_EQ(static_cast<int>(policy.size()), result); 2252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::FilePath policy_file_path() const { 2282a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) return temp_dir_.path().AppendASCII("policy.json"); 2292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::ScopedTempDir temp_dir_; 2322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) scoped_ptr<LocalPolicyTestServer> test_server_; 233a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) base::FilePath user_policy_key_file_; 2342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)}; 2352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicy) { 237c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 2382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 2412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2452a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap empty; 2462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(empty.Equals(policy_service->GetPolicies( 2472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy(0))); 2502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 2512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetExpectedTestPolicy(&expected); 2522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies, using the same key. 2552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 2592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 2612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#if defined(OS_CHROMEOS) 2632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)IN_PROC_BROWSER_TEST_F(CloudPolicyTest, FetchPolicyWithRotatedKey) { 264c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) PolicyService* policy_service = GetPolicyService(); 2652a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2662a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2672a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This does the initial fetch and stores the initial key. 2682a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2692a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2702a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2712a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2722a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Read the initial key. 2732a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string initial_key; 2742a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE( 275a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) file_util::ReadFileToString(user_policy_key_file_, &initial_key)); 2762a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2772a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap empty; 2782a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(empty.Equals(policy_service->GetPolicies( 2792a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2802a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2812a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Set the new policies and a new key at the server. 2822a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_NO_FATAL_FAILURE(SetServerPolicy(GetTestPolicy(1))); 2832a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyMap expected; 2842a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) GetExpectedTestPolicy(&expected); 2852a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 2862a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 2872a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // This fetches the new policies and does a key rotation. 2882a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 2892a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 2902a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 2912a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 2922a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 2932a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 2942a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Verify that the key was rotated. 2952a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string rotated_key; 2962a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE( 297a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) file_util::ReadFileToString(user_policy_key_file_, &rotated_key)); 2982a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_NE(rotated_key, initial_key); 2992a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3002a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Another refresh using the same key won't rotate it again. 3012a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) { 3022a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) base::RunLoop run_loop; 3032a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) policy_service->RefreshPolicies(run_loop.QuitClosure()); 3042a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) run_loop.Run(); 3052a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) } 3062a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_TRUE(expected.Equals(policy_service->GetPolicies( 3072a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) PolicyNamespace(POLICY_DOMAIN_CHROME, std::string())))); 3082a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string current_key; 3092a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE( 310a93a17c8d99d686bd4a1511e5504e5e6cc9fcadfTorne (Richard Coles) file_util::ReadFileToString(user_policy_key_file_, ¤t_key)); 3112a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(rotated_key, current_key); 3122a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3132a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)#endif 3142a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3152a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)TEST(CloudPolicyProtoTest, VerifyProtobufEquivalence) { 3162a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // There are 2 protobufs that can be used for user cloud policy: 3172a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // cloud_policy.proto and chrome_settings.proto. chrome_settings.proto is the 3182a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // version used by the server, but generates one proto message per policy; to 3192a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // save binary size on the client, the other version shares proto messages for 3202a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // policies of the same type. They generate the same bytes on the wire though, 3212a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // so they are compatible. This test verifies that that stays true. 3222a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3232a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build a ChromeSettingsProto message with one policy of each supported type. 3242a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::ChromeSettingsProto chrome_settings; 3252a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_homepagelocation()->set_homepagelocation( 3262a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) "chromium.org"); 3272a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_showhomebutton()->set_showhomebutton(true); 328c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) chrome_settings.mutable_restoreonstartup()->set_restoreonstartup(4); 3292a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::StringList* list = 3302a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disabledschemes()->mutable_disabledschemes(); 3312a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 3322a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 3332a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Try explicitly setting a policy mode too. 3342a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->set_disablespdy(false); 3352a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_disablespdy()->mutable_policy_options()->set_mode( 3362a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 3372a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->set_syncdisabled(true); 3382a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) chrome_settings.mutable_syncdisabled()->mutable_policy_options()->set_mode( 3392a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 3402a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3412a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // Build an equivalent CloudPolicySettings message. 3422a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::CloudPolicySettings cloud_policy; 3432a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_homepagelocation()->set_value("chromium.org"); 3442a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_showhomebutton()->set_value(true); 345c2e0dbddbe15c98d52c4786dac06cb8952a8ae6dTorne (Richard Coles) cloud_policy.mutable_restoreonstartup()->set_value(4); 3462a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list = cloud_policy.mutable_disabledschemes()->mutable_value(); 3472a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("ftp"); 3482a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) list->add_entries("mailto"); 3492a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->set_value(false); 3502a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_disablespdy()->mutable_policy_options()->set_mode( 3512a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::MANDATORY); 3522a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->set_value(true); 3532a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) cloud_policy.mutable_syncdisabled()->mutable_policy_options()->set_mode( 3542a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) em::PolicyOptions::RECOMMENDED); 3552a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3562a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) // They should now serialize to the same bytes. 3572a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string chrome_settings_serialized; 3582a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) std::string cloud_policy_serialized; 3592a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(chrome_settings.SerializeToString(&chrome_settings_serialized)); 3602a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) ASSERT_TRUE(cloud_policy.SerializeToString(&cloud_policy_serialized)); 3612a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) EXPECT_EQ(chrome_settings_serialized, cloud_policy_serialized); 3622a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} 3632a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles) 3642a99a7e74a7f215066514fe81d2bfa6639d9edddTorne (Richard Coles)} // namespace policy 365