[gnome-shell/wip/lockdown-show-password: 4/4] shellEntry: Support lockdown of "Show Text" menu in password entries

[Ray Strode <halfline src gnome org>]

commit c9086159cae85f8f92de46af32fa81f30226dc14
Author: Ray Strode <rstrode redhat com>
Date:   Wed Aug 21 15:06:46 2019 -0400

    shellEntry: Support lockdown of "Show Text" menu in password entries
    
    Some deployments require being able to prevent users from showing
    the password they're currently typing.
    
    This commit adds support for that kind of lockdown.

 js/ui/shellEntry.js | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)
---
diff --git a/js/ui/shellEntry.js b/js/ui/shellEntry.js
index 653b581dc4..ab7924f095 100644
--- a/js/ui/shellEntry.js
+++ b/js/ui/shellEntry.js
@@ -1,17 +1,23 @@
 // -*- mode: js; js-indent-level: 4; indent-tabs-mode: nil -*-
 /* exported addContextMenu */
 
-const { Clutter, Shell, St } = imports.gi;
+const { Clutter, Gio, Shell, St } = imports.gi;
 
 const BoxPointer = imports.ui.boxpointer;
 const Main = imports.ui.main;
 const Params = imports.misc.params;
 const PopupMenu = imports.ui.popupMenu;
 
+const LOCKDOWN_SCHEMA = 'org.gnome.desktop.lockdown';
+const DISABLE_SHOW_PASSWORD_KEY = 'disable-show-password';
+
 var EntryMenu = class extends PopupMenu.PopupMenu {
     constructor(entry) {
         super(entry, 0, St.Side.TOP);
 
+        this._lockdownSettings = new Gio.Settings({ schema_id: LOCKDOWN_SCHEMA });
+        this._lockdownSettings.connect('changed::' + DISABLE_SHOW_PASSWORD_KEY, 
this._resetPasswordItem.bind(this));
+
         this._entry = entry;
         this._clipboard = St.Clipboard.get_default();
 
@@ -42,13 +48,15 @@ var EntryMenu = class extends PopupMenu.PopupMenu {
     }
 
     _resetPasswordItem() {
-        if (!this.isPassword) {
+        let passwordDisabled = this._lockdownSettings.get_boolean(DISABLE_SHOW_PASSWORD_KEY);
+
+        if (!this.isPassword || passwordDisabled) {
             if (this._passwordItem) {
                 this._passwordItem.destroy();
                 this._passwordItem = null;
             }
             this._entry.clutter_text.set_password_char('\u25cf');
-        } else {
+        } else if (this.isPassword && !passwordDisabled) {
             if (!this._passwordItem)
                 this._makePasswordItem();
         }