Closed Bug 1630884 Opened 5 years ago Closed 4 years ago

Permissions can be modified even if forbidden by policy engine

Categories

(Firefox :: Enterprise Policies, defect, P3)

68 Branch
defect

Tracking

()

RESOLVED FIXED
Firefox 78
Tracking Status
firefox78 --- fixed

People

(Reporter: kontakt.luck, Assigned: mkaply)

Details

Attachments

(1 file)

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

Access to location is generally forbidden by GPO and locked in Settings > Permissions (like it should)
Opened maps.google.com
Via page information > Permissions (for specific site) > Access to location changed the setting to allow access on location

Actual results:

Location was given to website

Expected results:

Option should not be modifiable

Don't think this needs to be security-sensitive. Mike?

Group: firefox-core-security → mozilla-employee-confidential
Component: Untriaged → Enterprise Policies
Flags: needinfo?(mozilla)

No this was a mistake on my behalf

Group: mozilla-employee-confidential

I'd been meaning to open a bug for this, so thank you.

I wasn't sure what the right thing to do here was, but you're right. If the pref is locked specifically, it should be locked in the page permissions dialog.

Flags: needinfo?(mozilla)
Priority: -- → P3

Resetting severity to default of --.

Assignee: nobody → mozilla

Because this bug's Severity has not been changed from the default since it was filed, and it's Priority is P3 (Backlog,) indicating it has been triaged, the bug's Severity is being updated to S3 (normal.)

Assignee: mozilla → nobody
Severity: normal → S3
Assignee: nobody → mozilla
Pushed by mozilla@kaply.com: https://hg.mozilla.org/integration/autoland/rev/11a869132e76 Handle locked prefs in page info dialog. r=Gijs
Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED

Did not mean to close. Just mean to switch to NEW.

Status: RESOLVED → REOPENED
Ever confirmed: true
Resolution: FIXED → ---
Status: REOPENED → RESOLVED
Closed: 4 years ago4 years ago
Resolution: --- → FIXED
Target Milestone: --- → Firefox 78
QA Whiteboard: [qa-78b-p2]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: