Closed Bug 1328442 Opened 9 years ago Closed 8 years ago

Add ability to force specific site permissions by the system administrator

Categories

(Core :: AutoConfig (Mission Control Desktop), defect)

Product:
Core
Component:
AutoConfig (Mission Control Desktop)
Version:
50 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: emk, Assigned: mkaply)

References

(Blocks 1 open bug)

Details

+++ This bug was initially created as a clone of Bug #1268422 +++ For enterprise use, the popup blocker feature is required but it is needed that their internal websites are "allowed" by default. Other permissions also. Thus I developed an addon "Permission Auto Registerer" to register site permissions based on preferences given by the system administrator via MCD (Mission Control Desktop) mechanism. https://addons.mozilla.org/firefox/addon/permissions-auto-registerer/ After XUL is ended, I need something to alter it - WebExtensions APIs to do it, or something others.
Note: WebExtensions APIs are rejected in bug 1324430.
(In reply to Masatoshi Kimura [:emk] from comment #1) > Note: WebExtensions APIs are rejected in bug 1324430. Sorry, bug 1268422.
Summary: Add ability to manage site permissions via WebExtensions APIs (add, remove, update) → Add ability to configure site permissions by the system administrator
I found "permissions.manager.defaultsUrl" pref. Piro, is this insufficient for your use case?
Flags: needinfo?(yuki)
Thanks! It seems the one I need. But I couldn't find out documentations for the feature. * The default permissions seems to be loaded on every startup and every refresh. * The file seems to be a TSV. Here is the format information: https://dxr.mozilla.org/mozilla-central/source/extensions/cookie/nsPermissionManager.cpp#2698
Flags: needinfo?(yuki)
I've confirmed the actual behavior. The default permissions are just treated as "default" and it never overrides user-configured permissions. For example, if the default permission says that addons.mozilla.org is allowed to install addons and the user deletes it, the only state "xpinstall=disalloed for addons.mozilla.org" is stored in the database permissions.sqlite and it won't be overridden by the default permission. On the other hand, the addon "Permission Auto Registerer" can override user-defined permissions. In other words, the system administrator can force specific permission settings for user environments.
Summary: Add ability to configure site permissions by the system administrator → Add ability to force specific site permissions by the system administrator
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INACTIVE
This was done with our new policy code.
Resolution: INACTIVE → FIXED
This looks not fixed yet, for some permissions listed at Ctrl-I (Page Info) => Permissions: * Access Your Location * Automatically Play Media with Sound * Load Images * Override Keyboard Shortcuts * Receive Notifications * Share the Screen * Store Data in Persistent Storage * Switch to this Tab * Use the Camera * Use the Microphone Should I file new bugs for each permission?
We're doing a few of these (location, camera, microphone, notifications) and I see no reason to do the rest. Our goal is not to add policies for everything in the browser, it's to add policies for things that enterprises need to customize.
You need to log in before you can comment on or make changes to this bug.