src/components/policy/core/browser/configuration_policy_handler_unittest.cc

   1 // Copyright (c) 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "base/bind.h"
   6 #include "base/callback.h"
   7 #include "base/json/json_reader.h"
   8 #include "base/memory/scoped_ptr.h"
   9 #include "base/prefs/pref_value_map.h"
  10 #include "base/values.h"
  11 #include "components/policy/core/browser/configuration_policy_handler.h"
  12 #include "components/policy/core/browser/policy_error_map.h"
  13 #include "components/policy/core/common/policy_map.h"
  14 #include "components/policy/core/common/schema.h"
  15 #include "testing/gtest/include/gtest/gtest.h"
  16
  17 namespace policy {
  18
  19 namespace {
  20
  21 void GetIntegerTypeMap(
  22     ScopedVector<StringMappingListPolicyHandler::MappingEntry>* result) {
  23   result->push_back(new StringMappingListPolicyHandler::MappingEntry(
  24       "one", scoped_ptr<base::Value>(new base::FundamentalValue(1))));
  25   result->push_back(new StringMappingListPolicyHandler::MappingEntry(
  26       "two", scoped_ptr<base::Value>(new base::FundamentalValue(2))));
  27 }
  28
  29 const char kTestPolicy[] = "unit_test.test_policy";
  30 const char kTestPref[] = "unit_test.test_pref";
  31
  32 class TestSchemaValidatingPolicyHandler : public SchemaValidatingPolicyHandler {
  33  public:
  34   TestSchemaValidatingPolicyHandler(const Schema& schema,
  35                                     SchemaOnErrorStrategy strategy)
  36       : SchemaValidatingPolicyHandler("PolicyForTesting", schema, strategy) {}
  37   ~TestSchemaValidatingPolicyHandler() override {}
  38
  39   void ApplyPolicySettings(const policy::PolicyMap&, PrefValueMap*) override {}
  40
  41   bool CheckAndGetValueForTest(const PolicyMap& policies,
  42                                scoped_ptr<base::Value>* value) {
  43     return SchemaValidatingPolicyHandler::CheckAndGetValue(
  44         policies, NULL, value);
  45   }
  46 };
  47
  48 }  // namespace
  49
  50 TEST(StringToIntEnumListPolicyHandlerTest, CheckPolicySettings) {
  51   base::ListValue list;
  52   PolicyMap policy_map;
  53   PolicyErrorMap errors;
  54   StringMappingListPolicyHandler handler(
  55       kTestPolicy,
  56       kTestPref,
  57       base::Bind(GetIntegerTypeMap));
  58
  59   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
  60                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
  61   errors.Clear();
  62   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
  63   EXPECT_TRUE(errors.empty());
  64
  65   list.AppendString("one");
  66   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
  67                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
  68   errors.Clear();
  69   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
  70   EXPECT_TRUE(errors.empty());
  71
  72   list.AppendString("invalid");
  73   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
  74                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
  75   errors.Clear();
  76   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
  77   EXPECT_FALSE(errors.empty());
  78   EXPECT_FALSE(errors.GetErrors(kTestPolicy).empty());
  79
  80   policy_map.Set(kTestPolicy,
  81                  POLICY_LEVEL_MANDATORY,
  82                  POLICY_SCOPE_USER,
  83                  new base::StringValue("no list"),
  84                  NULL);
  85   errors.Clear();
  86   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
  87   EXPECT_FALSE(errors.empty());
  88   EXPECT_FALSE(errors.GetErrors(kTestPolicy).empty());
  89 }
  90
  91 TEST(StringMappingListPolicyHandlerTest, ApplyPolicySettings) {
  92   base::ListValue list;
  93   base::ListValue expected;
  94   PolicyMap policy_map;
  95   PrefValueMap prefs;
  96   base::Value* value;
  97   StringMappingListPolicyHandler handler(
  98       kTestPolicy,
  99       kTestPref,
 100       base::Bind(GetIntegerTypeMap));
 101
 102   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
 103                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
 104   handler.ApplyPolicySettings(policy_map, &prefs);
 105   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 106   EXPECT_TRUE(base::Value::Equals(&expected, value));
 107
 108   list.AppendString("two");
 109   expected.AppendInteger(2);
 110   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
 111                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
 112   handler.ApplyPolicySettings(policy_map, &prefs);
 113   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 114   EXPECT_TRUE(base::Value::Equals(&expected, value));
 115
 116   list.AppendString("invalid");
 117   policy_map.Set(kTestPolicy, POLICY_LEVEL_MANDATORY,
 118                  POLICY_SCOPE_USER, list.DeepCopy(), NULL);
 119   handler.ApplyPolicySettings(policy_map, &prefs);
 120   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 121   EXPECT_TRUE(base::Value::Equals(&expected, value));
 122 }
 123
 124 TEST(IntRangePolicyHandler, CheckPolicySettingsClamp) {
 125   PolicyMap policy_map;
 126   PolicyErrorMap errors;
 127
 128   // This tests needs to modify an int policy. The exact policy used and its
 129   // semantics outside the test are irrelevant.
 130   IntRangePolicyHandler handler(kTestPolicy, kTestPref, 0, 10, true);
 131
 132   // Check that values lying in the accepted range are not rejected.
 133   policy_map.Set(kTestPolicy,
 134                  POLICY_LEVEL_MANDATORY,
 135                  POLICY_SCOPE_USER,
 136                  new base::FundamentalValue(0),
 137                  NULL);
 138   errors.Clear();
 139   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 140   EXPECT_TRUE(errors.empty());
 141
 142   policy_map.Set(kTestPolicy,
 143                  POLICY_LEVEL_MANDATORY,
 144                  POLICY_SCOPE_USER,
 145                  new base::FundamentalValue(5),
 146                  NULL);
 147   errors.Clear();
 148   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 149   EXPECT_TRUE(errors.empty());
 150
 151   policy_map.Set(kTestPolicy,
 152                  POLICY_LEVEL_MANDATORY,
 153                  POLICY_SCOPE_USER,
 154                  new base::FundamentalValue(10),
 155                  NULL);
 156   errors.Clear();
 157   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 158   EXPECT_TRUE(errors.empty());
 159
 160   // Check that values lying outside the accepted range are not rejected
 161   // (because clamping is enabled) but do yield a warning message.
 162   policy_map.Set(kTestPolicy,
 163                  POLICY_LEVEL_MANDATORY,
 164                  POLICY_SCOPE_USER,
 165                  new base::FundamentalValue(-5),
 166                  NULL);
 167   errors.Clear();
 168   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 169   EXPECT_FALSE(errors.empty());
 170
 171   policy_map.Set(kTestPolicy,
 172                  POLICY_LEVEL_MANDATORY,
 173                  POLICY_SCOPE_USER,
 174                  new base::FundamentalValue(15),
 175                  NULL);
 176   errors.Clear();
 177   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 178   EXPECT_FALSE(errors.empty());
 179
 180   // Check that an entirely invalid value is rejected and yields an error
 181   // message.
 182   policy_map.Set(kTestPolicy,
 183                  POLICY_LEVEL_MANDATORY,
 184                  POLICY_SCOPE_USER,
 185                  new base::StringValue("invalid"),
 186                  NULL);
 187   errors.Clear();
 188   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 189   EXPECT_FALSE(errors.empty());
 190 }
 191
 192 TEST(IntRangePolicyHandler, CheckPolicySettingsDontClamp) {
 193   PolicyMap policy_map;
 194   PolicyErrorMap errors;
 195
 196   // This tests needs to modify an int policy. The exact policy used and its
 197   // semantics outside the test are irrelevant.
 198   IntRangePolicyHandler handler(kTestPolicy, kTestPref, 0, 10, false);
 199
 200   // Check that values lying in the accepted range are not rejected.
 201   policy_map.Set(kTestPolicy,
 202                  POLICY_LEVEL_MANDATORY,
 203                  POLICY_SCOPE_USER,
 204                  new base::FundamentalValue(0),
 205                  NULL);
 206   errors.Clear();
 207   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 208   EXPECT_TRUE(errors.empty());
 209
 210   policy_map.Set(kTestPolicy,
 211                  POLICY_LEVEL_MANDATORY,
 212                  POLICY_SCOPE_USER,
 213                  new base::FundamentalValue(5),
 214                  NULL);
 215   errors.Clear();
 216   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 217   EXPECT_TRUE(errors.empty());
 218
 219   policy_map.Set(kTestPolicy,
 220                  POLICY_LEVEL_MANDATORY,
 221                  POLICY_SCOPE_USER,
 222                  new base::FundamentalValue(10),
 223                  NULL);
 224   errors.Clear();
 225   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 226   EXPECT_TRUE(errors.empty());
 227
 228   // Check that values lying outside the accepted range are rejected and yield
 229   // an error message.
 230   policy_map.Set(kTestPolicy,
 231                  POLICY_LEVEL_MANDATORY,
 232                  POLICY_SCOPE_USER,
 233                  new base::FundamentalValue(-5),
 234                  NULL);
 235   errors.Clear();
 236   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 237   EXPECT_FALSE(errors.empty());
 238
 239   policy_map.Set(kTestPolicy,
 240                  POLICY_LEVEL_MANDATORY,
 241                  POLICY_SCOPE_USER,
 242                  new base::FundamentalValue(15),
 243                  NULL);
 244   errors.Clear();
 245   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 246   EXPECT_FALSE(errors.empty());
 247
 248   // Check that an entirely invalid value is rejected and yields an error
 249   // message.
 250   policy_map.Set(kTestPolicy,
 251                  POLICY_LEVEL_MANDATORY,
 252                  POLICY_SCOPE_USER,
 253                  new base::StringValue("invalid"),
 254                  NULL);
 255   errors.Clear();
 256   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 257   EXPECT_FALSE(errors.empty());
 258 }
 259
 260 TEST(IntRangePolicyHandler, ApplyPolicySettingsClamp) {
 261   PolicyMap policy_map;
 262   PrefValueMap prefs;
 263   scoped_ptr<base::Value> expected;
 264   const base::Value* value;
 265
 266   // This tests needs to modify an int policy. The exact policy used and its
 267   // semantics outside the test are irrelevant.
 268   IntRangePolicyHandler handler(kTestPolicy, kTestPref, 0, 10, true);
 269
 270   // Check that values lying in the accepted range are written to the pref.
 271   policy_map.Set(kTestPolicy,
 272                  POLICY_LEVEL_MANDATORY,
 273                  POLICY_SCOPE_USER,
 274                  new base::FundamentalValue(0),
 275                  NULL);
 276   prefs.Clear();
 277   handler.ApplyPolicySettings(policy_map, &prefs);
 278   expected.reset(new base::FundamentalValue(0));
 279   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 280   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 281
 282   policy_map.Set(kTestPolicy,
 283                  POLICY_LEVEL_MANDATORY,
 284                  POLICY_SCOPE_USER,
 285                  new base::FundamentalValue(5),
 286                  NULL);
 287   prefs.Clear();
 288   handler.ApplyPolicySettings(policy_map, &prefs);
 289   expected.reset(new base::FundamentalValue(5));
 290   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 291   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 292
 293   policy_map.Set(kTestPolicy,
 294                  POLICY_LEVEL_MANDATORY,
 295                  POLICY_SCOPE_USER,
 296                  new base::FundamentalValue(10),
 297                  NULL);
 298   prefs.Clear();
 299   handler.ApplyPolicySettings(policy_map, &prefs);
 300   expected.reset(new base::FundamentalValue(10));
 301   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 302   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 303
 304   // Check that values lying outside the accepted range are clamped and written
 305   // to the pref.
 306   policy_map.Set(kTestPolicy,
 307                  POLICY_LEVEL_MANDATORY,
 308                  POLICY_SCOPE_USER,
 309                  new base::FundamentalValue(-5),
 310                  NULL);
 311   prefs.Clear();
 312   handler.ApplyPolicySettings(policy_map, &prefs);
 313   expected.reset(new base::FundamentalValue(0));
 314   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 315   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 316
 317   policy_map.Set(kTestPolicy,
 318                  POLICY_LEVEL_MANDATORY,
 319                  POLICY_SCOPE_USER,
 320                  new base::FundamentalValue(15),
 321                  NULL);
 322   prefs.Clear();
 323   handler.ApplyPolicySettings(policy_map, &prefs);
 324   expected.reset(new base::FundamentalValue(10));
 325   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 326   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 327 }
 328
 329 TEST(IntRangePolicyHandler, ApplyPolicySettingsDontClamp) {
 330   PolicyMap policy_map;
 331   PrefValueMap prefs;
 332   scoped_ptr<base::Value> expected;
 333   const base::Value* value;
 334
 335   // This tests needs to modify an int policy. The exact policy used and its
 336   // semantics outside the test are irrelevant.
 337   IntRangePolicyHandler handler(kTestPolicy, kTestPref, 0, 10, true);
 338
 339   // Check that values lying in the accepted range are written to the pref.
 340   policy_map.Set(kTestPolicy,
 341                  POLICY_LEVEL_MANDATORY,
 342                  POLICY_SCOPE_USER,
 343                  new base::FundamentalValue(0),
 344                  NULL);
 345   prefs.Clear();
 346   handler.ApplyPolicySettings(policy_map, &prefs);
 347   expected.reset(new base::FundamentalValue(0));
 348   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 349   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 350
 351   policy_map.Set(kTestPolicy,
 352                  POLICY_LEVEL_MANDATORY,
 353                  POLICY_SCOPE_USER,
 354                  new base::FundamentalValue(5),
 355                  NULL);
 356   prefs.Clear();
 357   handler.ApplyPolicySettings(policy_map, &prefs);
 358   expected.reset(new base::FundamentalValue(5));
 359   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 360   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 361
 362   policy_map.Set(kTestPolicy,
 363                  POLICY_LEVEL_MANDATORY,
 364                  POLICY_SCOPE_USER,
 365                  new base::FundamentalValue(10),
 366                  NULL);
 367   prefs.Clear();
 368   handler.ApplyPolicySettings(policy_map, &prefs);
 369   expected.reset(new base::FundamentalValue(10));
 370   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 371   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 372 }
 373
 374 TEST(IntPercentageToDoublePolicyHandler, CheckPolicySettingsClamp) {
 375   PolicyMap policy_map;
 376   PolicyErrorMap errors;
 377
 378   // This tests needs to modify an int policy. The exact policy used and its
 379   // semantics outside the test are irrelevant.
 380   IntPercentageToDoublePolicyHandler handler(
 381       kTestPolicy, kTestPref, 0, 10, true);
 382
 383   // Check that values lying in the accepted range are not rejected.
 384   policy_map.Set(kTestPolicy,
 385                  POLICY_LEVEL_MANDATORY,
 386                  POLICY_SCOPE_USER,
 387                  new base::FundamentalValue(0),
 388                  NULL);
 389   errors.Clear();
 390   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 391   EXPECT_TRUE(errors.empty());
 392
 393   policy_map.Set(kTestPolicy,
 394                  POLICY_LEVEL_MANDATORY,
 395                  POLICY_SCOPE_USER,
 396                  new base::FundamentalValue(5),
 397                  NULL);
 398   errors.Clear();
 399   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 400   EXPECT_TRUE(errors.empty());
 401
 402   policy_map.Set(kTestPolicy,
 403                  POLICY_LEVEL_MANDATORY,
 404                  POLICY_SCOPE_USER,
 405                  new base::FundamentalValue(10),
 406                  NULL);
 407   errors.Clear();
 408   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 409   EXPECT_TRUE(errors.empty());
 410
 411   // Check that values lying outside the accepted range are not rejected
 412   // (because clamping is enabled) but do yield a warning message.
 413   policy_map.Set(kTestPolicy,
 414                  POLICY_LEVEL_MANDATORY,
 415                  POLICY_SCOPE_USER,
 416                  new base::FundamentalValue(-5),
 417                  NULL);
 418   errors.Clear();
 419   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 420   EXPECT_FALSE(errors.empty());
 421
 422   policy_map.Set(kTestPolicy,
 423                  POLICY_LEVEL_MANDATORY,
 424                  POLICY_SCOPE_USER,
 425                  new base::FundamentalValue(15),
 426                  NULL);
 427   errors.Clear();
 428   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 429   EXPECT_FALSE(errors.empty());
 430
 431   // Check that an entirely invalid value is rejected and yields an error
 432   // message.
 433   policy_map.Set(kTestPolicy,
 434                  POLICY_LEVEL_MANDATORY,
 435                  POLICY_SCOPE_USER,
 436                  new base::StringValue("invalid"),
 437                  NULL);
 438   errors.Clear();
 439   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 440   EXPECT_FALSE(errors.empty());
 441 }
 442
 443 TEST(IntPercentageToDoublePolicyHandler, CheckPolicySettingsDontClamp) {
 444   PolicyMap policy_map;
 445   PolicyErrorMap errors;
 446
 447   // This tests needs to modify an int policy. The exact policy used and its
 448   // semantics outside the test are irrelevant.
 449   IntPercentageToDoublePolicyHandler handler(
 450       kTestPolicy, kTestPref, 0, 10, false);
 451
 452   // Check that values lying in the accepted range are not rejected.
 453   policy_map.Set(kTestPolicy,
 454                  POLICY_LEVEL_MANDATORY,
 455                  POLICY_SCOPE_USER,
 456                  new base::FundamentalValue(0),
 457                  NULL);
 458   errors.Clear();
 459   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 460   EXPECT_TRUE(errors.empty());
 461
 462   policy_map.Set(kTestPolicy,
 463                  POLICY_LEVEL_MANDATORY,
 464                  POLICY_SCOPE_USER,
 465                  new base::FundamentalValue(5),
 466                  NULL);
 467   errors.Clear();
 468   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 469   EXPECT_TRUE(errors.empty());
 470
 471   policy_map.Set(kTestPolicy,
 472                  POLICY_LEVEL_MANDATORY,
 473                  POLICY_SCOPE_USER,
 474                  new base::FundamentalValue(10),
 475                  NULL);
 476   errors.Clear();
 477   EXPECT_TRUE(handler.CheckPolicySettings(policy_map, &errors));
 478   EXPECT_TRUE(errors.empty());
 479
 480   // Check that values lying outside the accepted range are rejected and yield
 481   // an error message.
 482   policy_map.Set(kTestPolicy,
 483                  POLICY_LEVEL_MANDATORY,
 484                  POLICY_SCOPE_USER,
 485                  new base::FundamentalValue(-5),
 486                  NULL);
 487   errors.Clear();
 488   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 489   EXPECT_FALSE(errors.empty());
 490
 491   policy_map.Set(kTestPolicy,
 492                  POLICY_LEVEL_MANDATORY,
 493                  POLICY_SCOPE_USER,
 494                  new base::FundamentalValue(15),
 495                  NULL);
 496   errors.Clear();
 497   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 498   EXPECT_FALSE(errors.empty());
 499
 500   // Check that an entirely invalid value is rejected and yields an error
 501   // message.
 502   policy_map.Set(kTestPolicy,
 503                  POLICY_LEVEL_MANDATORY,
 504                  POLICY_SCOPE_USER,
 505                  new base::StringValue("invalid"),
 506                  NULL);
 507   errors.Clear();
 508   EXPECT_FALSE(handler.CheckPolicySettings(policy_map, &errors));
 509   EXPECT_FALSE(errors.empty());
 510 }
 511
 512 TEST(IntPercentageToDoublePolicyHandler, ApplyPolicySettingsClamp) {
 513   PolicyMap policy_map;
 514   PrefValueMap prefs;
 515   scoped_ptr<base::Value> expected;
 516   const base::Value* value;
 517
 518   // This tests needs to modify an int policy. The exact policy used and its
 519   // semantics outside the test are irrelevant.
 520   IntPercentageToDoublePolicyHandler handler(
 521       kTestPolicy, kTestPref, 0, 10, true);
 522
 523   // Check that values lying in the accepted range are written to the pref.
 524   policy_map.Set(kTestPolicy,
 525                  POLICY_LEVEL_MANDATORY,
 526                  POLICY_SCOPE_USER,
 527                  new base::FundamentalValue(0),
 528                  NULL);
 529   prefs.Clear();
 530   handler.ApplyPolicySettings(policy_map, &prefs);
 531   expected.reset(new base::FundamentalValue(0.0));
 532   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 533   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 534
 535   policy_map.Set(kTestPolicy,
 536                  POLICY_LEVEL_MANDATORY,
 537                  POLICY_SCOPE_USER,
 538                  new base::FundamentalValue(5),
 539                  NULL);
 540   prefs.Clear();
 541   handler.ApplyPolicySettings(policy_map, &prefs);
 542   expected.reset(new base::FundamentalValue(0.05));
 543   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 544   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 545
 546   policy_map.Set(kTestPolicy,
 547                  POLICY_LEVEL_MANDATORY,
 548                  POLICY_SCOPE_USER,
 549                  new base::FundamentalValue(10),
 550                  NULL);
 551   prefs.Clear();
 552   handler.ApplyPolicySettings(policy_map, &prefs);
 553   expected.reset(new base::FundamentalValue(0.1));
 554   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 555   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 556
 557   // Check that values lying outside the accepted range are clamped and written
 558   // to the pref.
 559   policy_map.Set(kTestPolicy,
 560                  POLICY_LEVEL_MANDATORY,
 561                  POLICY_SCOPE_USER,
 562                  new base::FundamentalValue(-5),
 563                  NULL);
 564   prefs.Clear();
 565   handler.ApplyPolicySettings(policy_map, &prefs);
 566   expected.reset(new base::FundamentalValue(0.0));
 567   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 568   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 569
 570   policy_map.Set(kTestPolicy,
 571                  POLICY_LEVEL_MANDATORY,
 572                  POLICY_SCOPE_USER,
 573                  new base::FundamentalValue(15),
 574                  NULL);
 575   prefs.Clear();
 576   handler.ApplyPolicySettings(policy_map, &prefs);
 577   expected.reset(new base::FundamentalValue(0.1));
 578   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 579   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 580 }
 581
 582 TEST(IntPercentageToDoublePolicyHandler, ApplyPolicySettingsDontClamp) {
 583   PolicyMap policy_map;
 584   PrefValueMap prefs;
 585   scoped_ptr<base::Value> expected;
 586   const base::Value* value;
 587
 588   // This tests needs to modify an int policy. The exact policy used and its
 589   // semantics outside the test are irrelevant.
 590   IntPercentageToDoublePolicyHandler handler(
 591       kTestPolicy, kTestPref, 0, 10, true);
 592
 593   // Check that values lying in the accepted range are written to the pref.
 594   policy_map.Set(kTestPolicy,
 595                  POLICY_LEVEL_MANDATORY,
 596                  POLICY_SCOPE_USER,
 597                  new base::FundamentalValue(0),
 598                  NULL);
 599   prefs.Clear();
 600   handler.ApplyPolicySettings(policy_map, &prefs);
 601   expected.reset(new base::FundamentalValue(0.0));
 602   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 603   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 604
 605   policy_map.Set(kTestPolicy,
 606                  POLICY_LEVEL_MANDATORY,
 607                  POLICY_SCOPE_USER,
 608                  new base::FundamentalValue(5),
 609                  NULL);
 610   prefs.Clear();
 611   handler.ApplyPolicySettings(policy_map, &prefs);
 612   expected.reset(new base::FundamentalValue(0.05));
 613   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 614   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 615
 616   policy_map.Set(kTestPolicy,
 617                  POLICY_LEVEL_MANDATORY,
 618                  POLICY_SCOPE_USER,
 619                  new base::FundamentalValue(10),
 620                  NULL);
 621   prefs.Clear();
 622   handler.ApplyPolicySettings(policy_map, &prefs);
 623   expected.reset(new base::FundamentalValue(0.1));
 624   EXPECT_TRUE(prefs.GetValue(kTestPref, &value));
 625   EXPECT_TRUE(base::Value::Equals(expected.get(), value));
 626 }
 627
 628 TEST(SchemaValidatingPolicyHandlerTest, CheckAndGetValue) {
 629   std::string error;
 630   static const char kSchemaJson[] =
 631       "{"
 632       "  \"type\": \"object\","
 633       "  \"properties\": {"
 634       "    \"OneToThree\": {"
 635       "      \"type\": \"integer\","
 636       "      \"minimum\": 1,"
 637       "      \"maximum\": 3"
 638       "    },"
 639       "    \"Colors\": {"
 640       "      \"type\": \"string\","
 641       "      \"enum\": [ \"Red\", \"Green\", \"Blue\" ]"
 642       "    }"
 643       "  }"
 644       "}";
 645   Schema schema = Schema::Parse(kSchemaJson, &error);
 646   ASSERT_TRUE(schema.valid()) << error;
 647
 648   static const char kPolicyMapJson[] =
 649       "{"
 650       "  \"PolicyForTesting\": {"
 651       "    \"OneToThree\": 2,"
 652       "    \"Colors\": \"White\""
 653       "  }"
 654       "}";
 655   scoped_ptr<base::Value> policy_map_value(base::JSONReader::ReadAndReturnError(
 656       kPolicyMapJson, base::JSON_PARSE_RFC, NULL, &error));
 657   ASSERT_TRUE(policy_map_value) << error;
 658
 659   const base::DictionaryValue* policy_map_dict = NULL;
 660   ASSERT_TRUE(policy_map_value->GetAsDictionary(&policy_map_dict));
 661
 662   PolicyMap policy_map;
 663   policy_map.LoadFrom(
 664       policy_map_dict, POLICY_LEVEL_RECOMMENDED, POLICY_SCOPE_USER);
 665
 666   TestSchemaValidatingPolicyHandler handler(schema, SCHEMA_ALLOW_INVALID);
 667   scoped_ptr<base::Value> output_value;
 668   ASSERT_TRUE(handler.CheckAndGetValueForTest(policy_map, &output_value));
 669   ASSERT_TRUE(output_value);
 670
 671   base::DictionaryValue* dict = NULL;
 672   ASSERT_TRUE(output_value->GetAsDictionary(&dict));
 673
 674   // Test that CheckAndGetValue() actually dropped invalid properties.
 675   int int_value = -1;
 676   EXPECT_TRUE(dict->GetInteger("OneToThree", &int_value));
 677   EXPECT_EQ(2, int_value);
 678   EXPECT_FALSE(dict->HasKey("Colors"));
 679 }
 680
 681 TEST(SimpleSchemaValidatingPolicyHandlerTest, CheckAndGetValue) {
 682   const char policy_name[] = "PolicyForTesting";
 683   static const char kSchemaJson[] =
 684       "{"
 685       "  \"type\": \"object\","
 686       "  \"properties\": {"
 687       "    \"PolicyForTesting\": {"
 688       "      \"type\": \"object\","
 689       "      \"properties\": {"
 690       "        \"OneToThree\": {"
 691       "          \"type\": \"integer\","
 692       "          \"minimum\": 1,"
 693       "          \"maximum\": 3"
 694       "        },"
 695       "        \"Colors\": {"
 696       "          \"type\": \"string\","
 697       "          \"enum\": [ \"Red\", \"Green\", \"Blue\" ]"
 698       "        }"
 699       "      }"
 700       "    }"
 701       "  }"
 702       "}";
 703   std::string error;
 704   Schema schema = Schema::Parse(kSchemaJson, &error);
 705   ASSERT_TRUE(schema.valid()) << error;
 706
 707   static const char kPolicyMapJson[] =
 708       "{"
 709       "  \"PolicyForTesting\": {"
 710       "    \"OneToThree\": 2,"
 711       "    \"Colors\": \"Green\""
 712       "  }"
 713       "}";
 714   scoped_ptr<base::Value> policy_map_value(base::JSONReader::ReadAndReturnError(
 715       kPolicyMapJson, base::JSON_PARSE_RFC, NULL, &error));
 716   ASSERT_TRUE(policy_map_value) << error;
 717
 718   const base::DictionaryValue* policy_map_dict = NULL;
 719   ASSERT_TRUE(policy_map_value->GetAsDictionary(&policy_map_dict));
 720
 721   PolicyMap policy_map_recommended;
 722   policy_map_recommended.LoadFrom(
 723       policy_map_dict, POLICY_LEVEL_RECOMMENDED, POLICY_SCOPE_USER);
 724
 725   PolicyMap policy_map_mandatory;
 726   policy_map_mandatory.LoadFrom(
 727       policy_map_dict, POLICY_LEVEL_MANDATORY, POLICY_SCOPE_USER);
 728
 729   SimpleSchemaValidatingPolicyHandler handler_all(
 730       policy_name,
 731       kTestPref,
 732       schema,
 733       SCHEMA_STRICT,
 734       SimpleSchemaValidatingPolicyHandler::RECOMMENDED_ALLOWED,
 735       SimpleSchemaValidatingPolicyHandler::MANDATORY_ALLOWED);
 736
 737   SimpleSchemaValidatingPolicyHandler handler_recommended(
 738       policy_name,
 739       kTestPref,
 740       schema,
 741       SCHEMA_STRICT,
 742       SimpleSchemaValidatingPolicyHandler::RECOMMENDED_ALLOWED,
 743       SimpleSchemaValidatingPolicyHandler::MANDATORY_PROHIBITED);
 744
 745   SimpleSchemaValidatingPolicyHandler handler_mandatory(
 746       policy_name,
 747       kTestPref,
 748       schema,
 749       SCHEMA_STRICT,
 750       SimpleSchemaValidatingPolicyHandler::RECOMMENDED_PROHIBITED,
 751       SimpleSchemaValidatingPolicyHandler::MANDATORY_ALLOWED);
 752
 753   SimpleSchemaValidatingPolicyHandler handler_none(
 754       policy_name,
 755       kTestPref,
 756       schema,
 757       SCHEMA_STRICT,
 758       SimpleSchemaValidatingPolicyHandler::RECOMMENDED_PROHIBITED,
 759       SimpleSchemaValidatingPolicyHandler::MANDATORY_PROHIBITED);
 760
 761   const base::Value* value_expected_in_pref;
 762   policy_map_dict->Get(policy_name, &value_expected_in_pref);
 763
 764   PolicyErrorMap errors;
 765   PrefValueMap prefs;
 766   base::Value* value_set_in_pref;
 767
 768   EXPECT_TRUE(handler_all.CheckPolicySettings(policy_map_mandatory, &errors));
 769   EXPECT_TRUE(errors.empty());
 770   prefs.Clear();
 771   handler_all.ApplyPolicySettings(policy_map_mandatory, &prefs);
 772   EXPECT_TRUE(prefs.GetValue(kTestPref, &value_set_in_pref));
 773   EXPECT_TRUE(value_expected_in_pref->Equals(value_set_in_pref));
 774
 775   EXPECT_FALSE(
 776       handler_recommended.CheckPolicySettings(policy_map_mandatory, &errors));
 777   EXPECT_FALSE(errors.empty());
 778   errors.Clear();
 779
 780   EXPECT_TRUE(
 781       handler_mandatory.CheckPolicySettings(policy_map_mandatory, &errors));
 782   EXPECT_TRUE(errors.empty());
 783   prefs.Clear();
 784   handler_mandatory.ApplyPolicySettings(policy_map_mandatory, &prefs);
 785   EXPECT_TRUE(prefs.GetValue(kTestPref, &value_set_in_pref));
 786   EXPECT_TRUE(value_expected_in_pref->Equals(value_set_in_pref));
 787
 788   EXPECT_FALSE(handler_none.CheckPolicySettings(policy_map_mandatory, &errors));
 789   EXPECT_FALSE(errors.empty());
 790   errors.Clear();
 791
 792   EXPECT_TRUE(handler_all.CheckPolicySettings(policy_map_recommended, &errors));
 793   EXPECT_TRUE(errors.empty());
 794   prefs.Clear();
 795   handler_all.ApplyPolicySettings(policy_map_mandatory, &prefs);
 796   EXPECT_TRUE(prefs.GetValue(kTestPref, &value_set_in_pref));
 797   EXPECT_TRUE(value_expected_in_pref->Equals(value_set_in_pref));
 798
 799   EXPECT_FALSE(
 800       handler_mandatory.CheckPolicySettings(policy_map_recommended, &errors));
 801   EXPECT_FALSE(errors.empty());
 802   errors.Clear();
 803
 804   EXPECT_TRUE(
 805       handler_recommended.CheckPolicySettings(policy_map_recommended, &errors));
 806   EXPECT_TRUE(errors.empty());
 807   prefs.Clear();
 808   handler_recommended.ApplyPolicySettings(policy_map_mandatory, &prefs);
 809   EXPECT_TRUE(prefs.GetValue(kTestPref, &value_set_in_pref));
 810   EXPECT_TRUE(value_expected_in_pref->Equals(value_set_in_pref));
 811
 812   EXPECT_FALSE(
 813       handler_none.CheckPolicySettings(policy_map_recommended, &errors));
 814   EXPECT_FALSE(errors.empty());
 815 }
 816
 817 }  // namespace policy