Add DPC support for disabling unknown sources globally

Test: manual test, the option is available in the TestDPC app.
Bug: 111335021
Change-Id: I527f315c1136c030a31f18247eb11553aef74546

Author: Irina Dumitrescu

app/src/main/java/com/afwsamples/testdpc/policy/PolicyManagementFragment.java

@@ -583,7 +583,9 @@ public void onCreatePreferences(Bundle savedInstanceState, String rootKey) {
         mInstallNonMarketAppsPreference = (DpcSwitchPreference) findPreference(
                 INSTALL_NONMARKET_APPS_KEY);
         mInstallNonMarketAppsPreference.setCustomConstraint(
-                () -> mUserManager.hasUserRestriction(DISALLOW_INSTALL_UNKNOWN_SOURCES)
+                () -> (mUserManager.hasUserRestriction(DISALLOW_INSTALL_UNKNOWN_SOURCES) ||
+                    mUserManager.hasUserRestriction(
+                        UserRestriction.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY))
                         ? R.string.user_restricted
                         : NO_CUSTOM_CONSTRIANT);
         mInstallNonMarketAppsPreference.setOnPreferenceChangeListener(this);
@@ -1557,8 +1559,8 @@ private void updateStayOnWhilePluggedInPreference() {
      * Update the preference switch for {@link Settings.Secure#INSTALL_NON_MARKET_APPS} setting.
      *
      * <p>
-     * If the user restriction {@link UserManager#DISALLOW_INSTALL_UNKNOWN_SOURCES} is set, then
-     * we disable this preference.
+     * If one of the user restrictions {@link UserManager#DISALLOW_INSTALL_UNKNOWN_SOURCES} or
+     * {@link DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY} is set, then we disable this preference.
      * </p>
      */
     public void updateInstallNonMarketAppsPreference() {

app/src/main/java/com/afwsamples/testdpc/policy/UserRestriction.java

@@ -53,6 +53,8 @@ public class UserRestriction {
     public static final String DISALLOW_UNIFIED_PASSWORD = "no_unified_password";
     public static final String DISALLOW_CONFIG_LOCATION = "no_config_location";
     public static final String DISALLOW_PRINTING= "no_printing";
+    public static final String DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY =
+            "no_install_unknown_sources_globally";
 
     public String key;
     public int titleResId;
@@ -127,6 +129,8 @@ public UserRestriction(String key, int titleResId) {
                     R.string.disallow_install_apps),
             new UserRestriction(DISALLOW_INSTALL_UNKNOWN_SOURCES,
                     R.string.disallow_install_unknown_sources),
+            new UserRestriction(DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY,
+                    R.string.disallow_install_unknown_sources_globally),
             new UserRestriction(DISALLOW_MODIFY_ACCOUNTS, R
                     .string.disallow_modify_accounts),
             new UserRestriction(DISALLOW_MOUNT_PHYSICAL_MEDIA,
@@ -298,4 +302,8 @@ public UserRestriction(String key, int titleResId) {
             DISALLOW_SHARE_INTO_MANAGED_PROFILE,
             DISALLOW_PRINTING,
     };
+
+    public static String[] QT_PLUS_RESTRICTIONS = {
+            DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY,
+    };
 }

app/src/main/java/com/afwsamples/testdpc/policy/UserRestrictionsDisplayFragment.java

@@ -76,7 +76,7 @@ public void onCreatePreferences(Bundle bundle, String rootkey) {
         }
 
         updateAllUserRestrictions();
-        constrainPerferences();
+        constrainPreferences();
     }
 
     @Override
@@ -98,7 +98,9 @@ public boolean onPreferenceChange(Preference preference, Object newValue) {
                 mDevicePolicyManager.addUserRestriction(mAdminComponentName, restriction);
             } else {
                 mDevicePolicyManager.clearUserRestriction(mAdminComponentName, restriction);
-                if (DISALLOW_INSTALL_UNKNOWN_SOURCES.equals(restriction)) {
+                if (DISALLOW_INSTALL_UNKNOWN_SOURCES.equals(restriction) ||
+                        UserRestriction.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY.equals(
+                                restriction)) {
                     new AlertDialog.Builder(getActivity())
                             .setMessage(R.string.check_setting_disallow_install_unknown_sources)
                             .setPositiveButton(R.string.check_setting_ok, null)
@@ -130,7 +132,7 @@ private void updateUserRestriction(String userRestriction) {
         preference.setChecked(disallowed);
     }
 
-    private void constrainPerferences() {
+    private void constrainPreferences() {
         for (String restriction : UserRestriction.MNC_PLUS_RESTRICTIONS) {
             DpcPreferenceBase pref = (DpcPreferenceBase) findPreference(restriction);
             pref.setMinSdkVersion(Build.VERSION_CODES.M);
@@ -147,6 +149,11 @@ private void constrainPerferences() {
             DpcPreferenceBase pref = (DpcPreferenceBase) findPreference(restriction);
             pref.setMinSdkVersion(Build.VERSION_CODES.P);
         }
+        for (String restriction: UserRestriction.QT_PLUS_RESTRICTIONS) {
+            DpcPreferenceBase pref = (DpcPreferenceBase) findPreference(restriction);
+            // Replace this with Q when available
+            pref.setMinSdkVersion(Build.VERSION_CODES.CUR_DEVELOPMENT);
+        }
         for (String restriction : UserRestriction.PRIMARY_USER_ONLY_RESTRICTIONS) {
             DpcPreferenceBase pref = (DpcPreferenceBase) findPreference(restriction);
             pref.setUserConstraint(DpcPreferenceHelper.USER_PRIMARY_USER);

app/src/main/res/values/strings.xml

@@ -437,6 +437,7 @@
     <string name="check_setting_disallow_install_unknown_sources">Ensure that
         \"Allow installs from unknown sources\" under Settings management is correctly checked.
     </string>
+    <string name="disallow_install_unknown_sources_globally">Disallow installs from unknown sources globally</string>
     <string name="check_setting_ok">Ok</string>
     <string name="disallow_modify_accounts">Disallow modify accounts</string>
     <string name="disallow_mount_physical_media">Disallow mount physical media</string>