chrome/browser/enterprise/browser_management/browser_management_status_provider.cc

// Copyright 2020 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/enterprise/browser_management/browser_management_status_provider.h"

#include "build/build_config.h"
#include "build/chromeos_buildflags.h"
#include "chrome/browser/browser_process.h"
#include "chrome/browser/policy/chrome_browser_policy_connector.h"
#include "chrome/browser/policy/profile_policy_connector.h"
#include "chrome/browser/profiles/profile.h"
#include "components/enterprise/browser/controller/browser_dm_token_storage.h"

#if defined(OS_WIN)
#include "components/policy/core/common/management/platform_management_status_provider_win.h"
#elif BUILDFLAG(IS_CHROMEOS_ASH)
#include "chrome/browser/ash/profiles/profile_helper.h"
#include "components/user_manager/user_manager.h"
#endif

namespace {

bool IsProfileManaged(Profile* profile) {
  return profile && profile->GetProfilePolicyConnector() &&
         profile->GetProfilePolicyConnector()->IsManaged();
}

}  // namespace

BrowserCloudManagementStatusProvider::BrowserCloudManagementStatusProvider() =
    default;

BrowserCloudManagementStatusProvider::~BrowserCloudManagementStatusProvider() =
    default;

EnterpriseManagementAuthority
BrowserCloudManagementStatusProvider::GetAuthority() {
#if BUILDFLAG(IS_CHROMEOS_ASH)
  return EnterpriseManagementAuthority::NONE;
#else
  // A machine level user cloud policy manager is only created if the browser is
  // managed by CBCM.
  if (g_browser_process->browser_policy_connector()
          ->machine_level_user_cloud_policy_manager() != nullptr) {
    return EnterpriseManagementAuthority::CLOUD_DOMAIN;
  }
  return EnterpriseManagementAuthority::NONE;
#endif  // BUILDFLAG(IS_CHROMEOS_ASH)
}

LocalBrowserManagementStatusProvider::LocalBrowserManagementStatusProvider() =
    default;

LocalBrowserManagementStatusProvider::~LocalBrowserManagementStatusProvider() =
    default;

EnterpriseManagementAuthority
LocalBrowserManagementStatusProvider::GetAuthority() {
  auto result = EnterpriseManagementAuthority::NONE;
// BrowserPolicyConnector::HasMachineLevelPolicies is not supported on Chrome
// OS.
#if BUILDFLAG(IS_CHROMEOS_ASH)
  return result;
#else
  if (g_browser_process->browser_policy_connector()
          ->HasMachineLevelPolicies()) {
    result = EnterpriseManagementAuthority::COMPUTER_LOCAL;
#if defined(OS_WIN)
    if (policy::DomainEnrollmentStatusProvider::IsEnrolledToDomain())
      result = EnterpriseManagementAuthority::DOMAIN_LOCAL;
#endif  // defined(OS_WIN)
  }
  return result;
#endif  // BUILDFLAG(IS_CHROMEOS_ASH)
}

ProfileCloudManagementStatusProvider::ProfileCloudManagementStatusProvider(
    Profile* profile)
    : profile_(profile) {}

ProfileCloudManagementStatusProvider::~ProfileCloudManagementStatusProvider() =
    default;

EnterpriseManagementAuthority
ProfileCloudManagementStatusProvider::GetAuthority() {
  if (IsProfileManaged(profile_))
    return EnterpriseManagementAuthority::CLOUD;
#if BUILDFLAG(IS_CHROMEOS_ASH)
  // This session's primary user may also have policies, and those policies may
  // not have per-profile support.
  auto* primary_user = user_manager::UserManager::Get()->GetPrimaryUser();
  if (primary_user &&
      IsProfileManaged(
          ash::ProfileHelper::Get()->GetProfileByUser(primary_user))) {
    return EnterpriseManagementAuthority::CLOUD;
  }
#endif
  return EnterpriseManagementAuthority::NONE;
}

#if BUILDFLAG(IS_CHROMEOS_ASH)
DeviceManagementStatusProvider::DeviceManagementStatusProvider(
    policy::BrowserPolicyConnectorAsh* browser_policy_connector)
    : browser_policy_connector_(browser_policy_connector) {}

DeviceManagementStatusProvider::~DeviceManagementStatusProvider() = default;

EnterpriseManagementAuthority DeviceManagementStatusProvider::GetAuthority() {
  return browser_policy_connector_ &&
                 browser_policy_connector_->IsDeviceEnterpriseManaged()
             ? EnterpriseManagementAuthority::CLOUD_DOMAIN
             : EnterpriseManagementAuthority::NONE;
}
#endif