1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
// Copyright 2017 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/signin/signin_util.h"
#include <memory>
#include "base/feature_list.h"
#include "build/buildflag.h"
#include "build/chromeos_buildflags.h"
#include "chrome/browser/browser_process.h"
#include "chrome/browser/prefs/browser_prefs.h"
#include "chrome/browser/signin/signin_features.h"
#include "chrome/common/pref_names.h"
#include "chrome/test/base/browser_with_test_window_test.h"
#include "chrome/test/base/testing_browser_process.h"
#include "chrome/test/base/testing_profile.h"
#include "components/prefs/pref_service.h"
#include "components/prefs/testing_pref_service.h"
class SigninUtilTest : public BrowserWithTestWindowTest {
public:
void SetUp() override {
BrowserWithTestWindowTest::SetUp();
signin_util::ResetForceSigninForTesting();
}
void TearDown() override {
signin_util::ResetForceSigninForTesting();
BrowserWithTestWindowTest::TearDown();
}
};
TEST_F(SigninUtilTest, GetForceSigninPolicy) {
EXPECT_FALSE(signin_util::IsForceSigninEnabled());
g_browser_process->local_state()->SetBoolean(prefs::kForceBrowserSignin,
true);
signin_util::ResetForceSigninForTesting();
EXPECT_TRUE(signin_util::IsForceSigninEnabled());
g_browser_process->local_state()->SetBoolean(prefs::kForceBrowserSignin,
false);
signin_util::ResetForceSigninForTesting();
EXPECT_FALSE(signin_util::IsForceSigninEnabled());
}
#if !BUILDFLAG(IS_CHROMEOS_LACROS)
class SigninUtilEnterpriseTest : public BrowserWithTestWindowTest {
public:
SigninUtilEnterpriseTest()
: feature_list_(kAccountPoliciesLoadedWithoutSync) {}
private:
base::test::ScopedFeatureList feature_list_;
};
TEST_F(SigninUtilEnterpriseTest, ProfileSeparationEnforcedByPolicy) {
std::unique_ptr<TestingProfile> profile = TestingProfile::Builder().Build();
// No policy set on the active profile.
EXPECT_FALSE(signin_util::ProfileSeparationEnforcedByPolicy(profile.get(),
std::string()));
EXPECT_FALSE(
signin_util::ProfileSeparationEnforcedByPolicy(profile.get(), "none"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account_strict"));
// Active profile has "primary_account" as a user level policy.
profile->GetPrefs()->SetString(prefs::kManagedAccountsSigninRestriction,
"primary_account");
profile->GetPrefs()->SetBoolean(
prefs::kManagedAccountsSigninRestrictionScopeMachine, false);
EXPECT_FALSE(signin_util::ProfileSeparationEnforcedByPolicy(profile.get(),
std::string()));
EXPECT_FALSE(
signin_util::ProfileSeparationEnforcedByPolicy(profile.get(), "none"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account_strict"));
// Active profile has "primary_account_strict" as a user level policy.
profile->GetPrefs()->SetString(prefs::kManagedAccountsSigninRestriction,
"primary_account_strict");
profile->GetPrefs()->SetBoolean(
prefs::kManagedAccountsSigninRestrictionScopeMachine, false);
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(profile.get(),
std::string()));
EXPECT_TRUE(
signin_util::ProfileSeparationEnforcedByPolicy(profile.get(), "none"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account_strict"));
// Active profile has "primary_account" as a machine level policy.
profile->GetPrefs()->SetString(prefs::kManagedAccountsSigninRestriction,
"primary_account");
profile->GetPrefs()->SetBoolean(
prefs::kManagedAccountsSigninRestrictionScopeMachine, true);
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(profile.get(),
std::string()));
EXPECT_TRUE(
signin_util::ProfileSeparationEnforcedByPolicy(profile.get(), "none"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account_strict"));
// Active profile has "primary_account_strict" as a machine level policy.
profile->GetPrefs()->SetString(prefs::kManagedAccountsSigninRestriction,
"primary_account");
profile->GetPrefs()->SetBoolean(
prefs::kManagedAccountsSigninRestrictionScopeMachine, true);
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(profile.get(),
std::string()));
EXPECT_TRUE(
signin_util::ProfileSeparationEnforcedByPolicy(profile.get(), "none"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account"));
EXPECT_TRUE(signin_util::ProfileSeparationEnforcedByPolicy(
profile.get(), "primary_account_strict"));
}
#endif
|
