There was a lot of discussion of this on the Slack channel. Here's an example comment (similar to what Robin pointed out: Q: I'd like to manage Firefox updates, I see I can enforce auto-update to be "on" using a configuration profile. Is there a deployment method I can use to ensure that Firefox won't prompt for administrator credentials for updates? Does installing via the PKG (https://download.mozilla.org/?product=firefox-pkg-latest-ssl&os=osx&lang=en-US) prevent the need for end users to enter admin creds for regular updates? A: Nope The only way to ensure the user can update it themselves is to ensure the app bundle is owned by that same user. That's often difficult to do in an enterprise/organizational environment. When a user installs an app themselves by dragging it from a disk image to /Applications: 1) They are generally admin, and 2) The dragged app is now owned by that user If Firefox is installed via package or by a software management system, the app bundle is generally owned by root. Our strategy is to keep Firefox up-to-date using the same software management system that installed it (in this case, Munki).
Bug 1872934 Comment 6 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
There was a lot of discussion of this on the Mac Admins Slack. Here's an example comment (similar to what Robin pointed out: Q: I'd like to manage Firefox updates, I see I can enforce auto-update to be "on" using a configuration profile. Is there a deployment method I can use to ensure that Firefox won't prompt for administrator credentials for updates? Does installing via the PKG (https://download.mozilla.org/?product=firefox-pkg-latest-ssl&os=osx&lang=en-US) prevent the need for end users to enter admin creds for regular updates? A: Nope The only way to ensure the user can update it themselves is to ensure the app bundle is owned by that same user. That's often difficult to do in an enterprise/organizational environment. When a user installs an app themselves by dragging it from a disk image to /Applications: 1) They are generally admin, and 2) The dragged app is now owned by that user If Firefox is installed via package or by a software management system, the app bundle is generally owned by root. Our strategy is to keep Firefox up-to-date using the same software management system that installed it (in this case, Munki).