Bug 1491664 - Allow true and false for ImportEnterpriseRoots policy. r=Felipe

Differential Revision: https://phabricator.services.mozilla.com/D8137

--HG--
extra : moz-landing-system : lando

browser/components/enterprisepolicies/Policies.jsm

@@ -132,7 +132,7 @@ var Policies = {
   "Certificates": {
     onBeforeAddons(manager, param) {
       if ("ImportEnterpriseRoots" in param) {
-        setAndLockPref("security.enterprise_roots.enabled", true);
+        setAndLockPref("security.enterprise_roots.enabled", param.ImportEnterpriseRoots);
       }
     },
   },

browser/components/enterprisepolicies/tests/browser/browser_policies_simple_pref_policies.js

@@ -113,7 +113,7 @@ const POLICIES_TESTS = [
     },
   },
 
-  // POLICY: Certificates
+  // POLICY: Certificates (true)
   {
     policies: {
       "Certificates": {
@@ -125,6 +125,18 @@ const POLICIES_TESTS = [
     },
   },
 
+  // POLICY: Certificates (false)
+  {
+    policies: {
+      "Certificates": {
+        "ImportEnterpriseRoots": false,
+      },
+    },
+    lockedPrefs: {
+      "security.enterprise_roots.enabled": false,
+    },
+  },
+
   // POLICY: InstallAddons.Default (block addon installs)
   {
     policies: {