GitLab

ChromeManagementAPIDelegate::EnableExtension() is shared by both
regular and supervised users. This function calls
SupervisedUserService::AddOrUpdateExtensionApproval() which triggers
the kSupervisedUserApprovedExtensions syncable pref and the
SupervisedUsers.Extensions UMA histogram. Place guards in
AddOrUpdateExtensionApproval() and RemoveExtensionApproval() to only
permit supervised users.

Bug: 1073722
Change-Id: I16d73056d1002ce33d68705e7ceed3f6f961c9df
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2162134Reviewed-by: Devlin <rdevlin.cronin@chromium.org>
Reviewed-by: Dan S <danan@chromium.org>
Commit-Queue: Toby Huang <tobyhuang@chromium.org>
Cr-Commit-Position: refs/heads/master@{#762054}