Closed Bug 2012440 Opened 7 months ago Closed 1 month ago

Add policy DisableLocalPolicies

Categories

(Enterprise Products :: Firefox, enhancement, P1)

Desktop
All
enhancement

Tracking

(Not tracked)

VERIFIED FIXED

People

(Reporter: RT, Assigned: janika)

References

(Blocks 1 open bug)

Details

(Whiteboard: [size=1])

User Story

Acceptance criteria:
- Local policies.json handling is disabled
- GPO support is disabled

Attachments

(3 files)

No description provided.
User Story: (updated)
No longer depends on: 2012421
Blocks: 2012442
No longer blocks: 2012442
Priority: -- → P1
Severity: -- → S2
Whiteboard: [size=1]
Duplicate of this bug: 2008551
Blocks: 2015808
Assignee: nobody → jneuberger
Summary: Repack disables local policies.json and GPO → Client disables local policies.json and GPO

We'll likely have a policy engine that can merge local and remote policies, and then have this configurable by pref.

See Also: → 2029121
Blocks: 2045768
No longer blocks: 2015808
Summary: Client disables local policies.json and GPO → Add policy DisableLocalPolicies
Status: NEW → RESOLVED
Closed: 1 month ago
Resolution: --- → FIXED
Flags: qe-verify+

Hello Janika,
Could you please give QA some pointers on how we could test this when it lands?
One way might be to check in about:config for DisableLocalPolicies: true
Also, I saw on Github that this will only land in Firefox Enterprise 155.0.0? Is this accurate?
Thank you.

Flags: needinfo?(jneuberger)

Test Plan

  1. Create a policies.json and place it in the distribution folder following these steps: https://support.mozilla.org/en-US/kb/customizing-firefox-using-policiesjson. As described in the steps, it should have the following content:
{
  "policies": {
    "BlockAboutConfig": true
  }
}
  1. Verify the console doesn't send BlockAboutConfig : true to make sure the browser only gets that policy setting from the local policies.json
  2. Launch Firefox Enterprise
  3. Verify that BlockAboutConfig is active
    4.1. Check that about:policies lists BlockAboutConfig : true
    4.2. Check that `about:config is not accessible.
  4. Set DisableLocalPolicies : true in the console (Note: DisableLocalPolicies requires a restart).
  5. Restart Firefox Enterprise
  6. Verify DisableLocalPolicies is active
    7.1. Check that about:policies lists DisableLocalPolicies : true (alongside all other policies coming from the console)
    7.2. Check that about:policies doesn't list BlockAboutConfig
    7.3. Check that about:config is accessible again since local policies should be disabled.
  7. Unset DisableLocalPolicies in the console (either DisableLocalPolicies=false, or omit it/inherit the company policy).
  8. Restart Firefox Enterprise
  9. Verify local policies are re-enabled
    10.1. about:policies lists BlockAboutConfig: true again (local policy restored).
    10.2. about:config is not accessible again (repeat of 4.2).
    10.3. If you sent false, about:policies shows DisableLocalPolicies: false; if you omitted it, DisableLocalPolicies is not listed at all.
Flags: needinfo?(jneuberger)

Yes, DisableLocalPolicies is introduced in Firefox Enterprise 155.0.0. Let me know if there are any open questions! Thank you!

Hello,
Verified this on Windows 11x64, with Firefox Enterprise 155.0a1 (20260730154917), and the policy works as expected.
See TC here.
Please let us know if there is anything else we need to check.
Thank you.

Status: RESOLVED → VERIFIED
Flags: qe-verify+
See Also: → 2064561
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: