Work app store #2553
Work app store #2553
Conversation
Co-authored-by: Marvin W <[email protected]>
Verify that work accounts are only added by device owners or profile owners. For instance, Microsoft Intune will create a work profile (moving itself to the work profile in the process) before using the work account servce to create a work account, so at that point it will already be profile owner. Apps that are not the profile owner will subsequently not be able to disable the work account authenticator or remove the work account. The personal account would not have an owner and thus no application could enable the work account provider there.
Nonfunctional attempt.
|
Hi, was wondering if there'd be any use for classes like https://review.calyxos.org/c/CalyxOS/platform_external_microg_GmsCore/+/33556/3/play-services-auth/src/main/java/com/google/android/gms/auth/account/WorkAccountApi.java ? |
Agree with this. |
play-services-auth-workaccount/core/src/main/res/values/string.xml
Outdated
Show resolved
Hide resolved
@Uldiniad As far as I can tell, these classes from https://developers.google.com/android/reference/com/google/android/gms/auth/account/WorkAccount are used as an interface for the consumer of the DPC controller library, aren't they? I don't think we need to implement those in microG, as they seem not to be part of the library-to-GMS API. |
URI is only rewritten to reference the correct user ID (to become `content://[email protected]`) if it is set to an response intent's data, not if it is data of an intent that creates an activity cross-profile. (Suspected platform bug.)
i.e. even if no work profile was created
Specifically: sharing check-in data between work and primary profile breaks work vending functionality.
For installing trichrome static libraries like in https://gitlab.com/AuroraOSS/AuroraStore/-/issues/346.
vending-app/src/main/java/org/microg/vending/ui/WorkAppsActivity.kt
Outdated
Show resolved
Hide resolved
Supersedes and contains #2500. Supersedes and contains #2521.
Allows users to download apps to their work profile using the special vending component "Work app store". This component is disabled, and enabled only when a work profile is added (which in turn can only be done by a device or profile admin).
Yet to do:
/getEnterpriseClientPolicyINTERACT_ACROSS_USERSpermission for this)Mostly up-to-date screenshot: