New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 715745 link

Starred by 8 users

Issue metadata

Status: Duplicate
Merged: issue 749755
Owner:
Closed: Oct 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Bug



Sign in to add a comment

Wallpaper Picker bypassing Enterprise policy

Project Member Reported by vnikolov@chromium.org, Apr 26 2017

Issue description

Chrome OS Version: Issue reported on version 57 stable and it is also reproducible on 58.0.3029.78
Chrome OS Platform: HP Chromebook 14 G3

Steps To Reproduce: 
(1) Go to Settings > Appearance > Set Wallpaper > Wallpaper Picker opens 
(2) Pin Wallpaper Picker 
(3) Block Wallpaper Picker App ID and set custom wallpaper from User settings in Admin Console 
(4) Wallpaper Picker is still pinned and able to change the wallpaper 

Expected Result: Wallpaper Picker should be blocked and not able to change the Wallpaper 

Actual Result: Wallpaper Picker is working and is able to change the Wallpaper 

How frequently does this problem reproduce? - Always reproducible 

What is the impact to the user, and is there a workaround? If so, what is 
it? - Blocking access to chrome://settings. Blocking App ID does not fix the issue. 

Folder from testing environment containing screenshots, logs, video of the behavior in located here: https://drive.google.com/corp/drive/folders/0B3aQrkrcByfjRE45eDZfU1l4U0E
 
Cc: marcore@google.com
Labels: M-57 M-59 M-58
Owner: bhthompson@chromium.org
Status: Untriaged (was: Unconfirmed)
Hi Bernie, can you please help us to triage or assign if needed?

Cc: omrilio@chromium.org bhthompson@google.com
Owner: x...@chromium.org
Daisy, is this something in your jurisdiction?

Comment 4 by x...@chromium.org, Apr 27 2017

Let me take a look at it.
Hi all,

Are there any updates on this issue?

Thanks!
Components: Enterprise
Labels: M-60
Hi, I've received couple of feedback from other customers around this affecting devices on 59 and 60. Asus Flip(minie)
reported on 61 as well, as per customer.
any updates on this issue please?

Comment 9 by x...@chromium.org, Sep 21 2017

Cc: bshe@chromium.org
+bshe@ do you know where the logic to block wallpaper app id is? Is this the same as user wallpaper policy?
And also can we do step (3) in DMTest server?

Comment 10 by rarel@google.com, Sep 28 2017

Hi all,

I have a customer that has this issue and want to have the behavior fix to avoid any distraction for the students.

I hope we have update for this. 

Thanks!
xdai@, bshe@, is there any updates for this issue? Customers are asking.

Comment 12 by bshe@chromium.org, Oct 10 2017

Cc: bartfab@chromium.org
Sorry. I have no idea. I would guess enterprise policy is party of component/policy. +cc bartfab

Perhaps it doesn't work because wallpaper picker is a component app.
Cc: atwilson@chromium.org
Yes, you cannot block internal parts of Chrome OS like that. However, if the wallpaper is set by policy, any attempt to change it, whether by the wallpaper picker app or otherwise, should fail. There are two bugs here:

1) When the wallpaper is set by policy, any attempts to call the wallpaper setting API should fail.
2) For nicer UX, setting the wallpaper by policy should hide the wallpaper picker app (either via code outside the app or by having the app detect this and show an error message himself).

+atwilson if he wants someone on his team to take this on. I am responsible for ARC Enterprise only these days.
Hello,

We'd like to get any update on this bug please. Thanks!
Cc: dskaram@chromium.org
Labels: Hotlist-GoodFirstBug
+dskaram for visibility if we want to escalate priority, definitely picker should not be able to override policy wallpaper.

Comment 16 by x...@chromium.org, Oct 19 2017

Re comment#13:
1) Currently if the wallpaper is set by policy, any attempts to set a new wallpaper does fail (even if the user can open Wallpaper Picker app and try to set a wallpaper).
2) Currently if the user wallpaper policy is enforced, there is no way for a user to open the Wallpaper Picker app (there was a MD setting regression that broke this, but it was later fixed in M62.)

Anyone could tell me how to do the step in the bug report? I don't know how to block it thus can't repro it.
(3) Block Wallpaper Picker App ID and set custom wallpaper from User settings in Admin Console 
In Admin Console- we have the User setting set to "Custom Wallpaper" in the General settings See this page for google app policies: https://support.google.com/chrome/a/answer/2657289?hl=en#general

The custom wallpaper loads when user logs into managed chromebook.  If they right click on the desktop-- "Set Wallpaper" is grayed out.   But if they go to Settings and select Wallpaper under appearance --it opens the Wallpaper Picker App and allows them to change the wallpaper.  After they do that once they can now even right click on desktop and now they can "Set Wallpaper"

Defeats the purpose of setting a custom wallpaper in Admin Console if they are able to change it.


Comment 18 by x...@chromium.org, Oct 23 2017

Re#17: I believe the bug you described has been fixed in M61 (see  Issue 749755 ). Is that the same issue as this one? 
Re#18  Yes seems to be the same bug.  We are on stable channel and are at version 61.0.3163.123

Guess we have to wait for version 62 or 63 to become stable if I am reading the comments correctly.

Comment 20 by x...@chromium.org, Oct 23 2017

Mergedinto: 749755
Status: Duplicate (was: Untriaged)
Re#18: Right. 62 stable will be out very soon. So the issue should be fixed at that moment (in 62 and later).
I'll close this issue then.

Sign in to add a comment