New issue
Advanced search Search tips

Issue 729340 link

Starred by 8 users

Issue metadata

Status: Archived
Owner:
Closed: Dec 20
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug


Show other hotlists

Hotlists containing this issue:
Chrome-Bug-Cleanup
Hotlist-1


Sign in to add a comment

Enable fullscreen mode in Public Sessions

Reported by mbre...@gmail.com, Jun 3 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
Platform: 9334.72.0 (stable)

Steps to reproduce the problem:
The removal of fullscreen for Public Sessions via https://bugs.chromium.org/p/chromium/issues/detail?id=275405 is troubleing. While there was a balance that was apparently trying to be achieved, there are many legitimate use cases where fullscreen can be useful.

This specific use case: an internet cafe. A full screen app launches at first to require authentication (to ensure users pay) and then drops down to a Public Session to allow the user to browse.

If there was some way to combine kiosk mode and PS mode together, that would work, too. But at the moment, with fullscreen disabled, the device owner is disadvantaged in favor of the user, quite counterintuitively.

What is the expected behavior?
Allow the device owner/operator to decide on the security features desired for a given kiosk.

What went wrong?
At the moment, certain API's are disabled in the name of security, including a lack of fullscreen ability.

Did this work before? N/A 

Does this work in other browsers? N/A

Chrome version: 58.0.3029.140  Channel: stable
OS Version: OS X 10.12.4
Flash Version: 

I'll be thankful for any workaround. It seems chromeboxes are a perfect fit for an internet cafe. But at the moment I cannot move forward with them as there is no way to enforce payment.
 
Components: UI>Shell>PublicAccounts
Cc: bartfab@chromium.org
So you don't just want "fullscreen", you want "full screen and the user can't exit it".

Bartosz, FYI - similar to other LST cases we've been considering.

Comment 3 by mbre...@gmail.com, Jun 6 2017

Thanks for taking the time to respond.

> you want "full screen and the user can't exit"

Yes, that is correct. The user should not be able to exit, and should require some progromatic event to take him to a PS.

If this is an Internet cafe, you control the network. Why not throw up a captive portal that forces the user to pay before browsing?

Comment 5 by mbre...@gmail.com, Jun 7 2017

Great questions. My next phase in developing the app is to minimize (not close) the app to a small window and keep it always on top. This would allow us to display remaining time, and to allow for the user to log off when they are. 
You should be able to use the Public Session policies for session timer - "Maximum User Session Length" rather than creating an app.

https://support.google.com/chrome/a/answer/3017014?hl=en

Comment 7 Deleted

Comment 8 by mbre...@gmail.com, Jun 7 2017

> "Maximum User Session Length"

Correct me if I'm wrong, but I believe that setting is to enforce a uniform time for all users. There is no uniformity between users in my use case. Additionally, without an app I wouldn't be able to create a "time remaining" timer (again, unique on a per user bases, depending on the amount of credit they have and subject to updated in real time in the event that they top up), or offer other upsell opportunities.
Yes, the session length limit is just a fixed limit for every session. Your use case sounds like it will benefit from some custom UI implemented as a Chrome app but payment enforcement is probably still best done on the network side.

Comment 10 by mbre...@gmail.com, Jun 8 2017

I see how something network side would make sense, but in this environment a welcoming and helpful "onboarding" screen would be necessary. While one could be provided via a web site, it would be more beneficial to completely take over the screen (showing a web site, no matter how obvious the login screen is, would be confusing here to lots of users).

Other functions for which a fullscreen app is more suitable include things like prevent a non authenticated user from, say, copying files.

Also note the other functions of this app, like the "time remaining" I noted above, which would necessitate running the app anyway.

Finally, while there are benefits to a captive portal, it requires a much more sophisticated setup on top of the already necessary parts (such as a billing server). Where I believe CrOS really shines in this case is in it's simplicity!

Comment 11 by zork@chromium.org, Jun 9 2017

Cc: -bartfab@chromium.org
Owner: bartfab@chromium.org
Status: Assigned (was: Unconfirmed)
Cc: bartfab@chromium.org
Owner: ----
Status: Unconfirmed (was: Assigned)
I no longer work on Chrome OS. Removing myself as owner.

Comment 13 by mbre...@gmail.com, Jun 18 2017

Who can take this over?
Cc: -bartfab@chromium.org sduraisamy@chromium.org
There are a couple of concerns with your use-case:
1) ability to launch a chrome app in full-screen mode (this bug)
2) auto-launching an app in public session and making it a blocking app (not supported)

I am not sure if full-screen ability alone can solve your use-case.

Comment 15 by mbre...@gmail.com, Jun 18 2017

Thanks, although I'm not sure I follow. Are you saying that the ability to "launch a chrome app in full-screen mode" is a bug?

As per "auto-launching an app in public session and making it a blocking app", I have noted the issue where this was disabled. I was hoping that there can be a public dialog on this, seeing as "secure by default" can be viewed from multiple points of view. It really depends on whether looking at the security from user or the device owner's point of view and weather the goal is to "protect the user from the device owner" or "protect the device owner from the user".

Personally I'm leaning towards giving control to the device owner, as I don't think that once purchased a device owner should be told what they can or cannot do with the device (provided the technology is easily supported). This is especially true when the requested functionality was already in place and is support - in general - across the platform.

I would love to hear other viewpoints though!

p.s. It's likely that fullscreen alone won't solve my objectives. It seems that Keep on top is also necessary
I should have been clear. It was not a bug. We disabled full-screen and wanted to show "Exit Session" button always to remind the user that they are using a public kiosk.

We are reviewing the design decision about full-screen mode.

Comment 17 by mbre...@gmail.com, Jun 19 2017

> We are reviewing the design decision about full-screen mode.

That is great. If this is a conversation you guys would be willing to have out in the open, I'd be happy to participate!

Comment 18 by s.ra...@cam.nl, Jun 20 2017

It would be great if the device owner (using Google Device Management) can control if full screen is allowed in public session mode. So by default it is set to 'do not allow' and you can override to allow full screen.
This makes a lot of use cases possible and will drive the adoption of ChromeOS. To name a few:
- Citrix HTML5 receiver in full screen
- Allow Citrix Receiver for ChromeOS to use multiple screens
- Watch YouTube and other video's in full screen
- Use PowerPoint online and Prezi in presentation mode
This is a highly requested option for me and my customers as well. We are using Chromebox mainly with Citrix VDI environment and all devices are being managed with Google Device management and configured in public session along with some other settings. Citrix added the full screen mode to their Receiver for HTML5 client but unfortunately this is not supported in public session.
As mentioned above there are lots more use-cases to enable/allow fullscreen mode within public session. This will make a lot of customers, especially within Enterprise, very happy.

I would love to echo that being able to allow full screen mode in a public session would be extremely helpful.  I would also love this to be a configurable setting in device management.  

Comment 21 by zalcorn@google.com, Jun 23 2017

Owner: sduraisamy@chromium.org
Status: Assigned (was: Unconfirmed)
/UI triage
Cc: bartfab@chromium.org

Comment 23 by mbre...@gmail.com, Aug 1 2017

> We are reviewing the design decision about full-screen mode

Are you guys ready to share any thoughts on the matter? Would love to know where you guys stand on this!

Comment 24 by mbre...@gmail.com, Sep 27 2017

ping - it would be great if we could get an update here!
Bump--would also like an update. Citrix org very interested in using Chrombooks with Public Sessions. 

No fullscreen is a deal breaker.
Also requesting this fix please.  How about the exit session button floats on top of the desktop like the session timer and idle timer do?  Need Citrix to run full screen for alt-tab functionality to work on the remote session.
Thanks for implementing this in v62 - fixed my issue with Citrix receiver - now able to use full screen in public session mode.

Comment 28 by mbre...@gmail.com, Nov 3 2017

Thank you so much! While this doesn't provide a full secure environment (meta keys can be used to steal focus), it's a huge step forward. Thanks!

If you can also allow alwaysOnTop or trapping of meta keys, that would be perfect.
Cc: -sduraisamy@chromium.org -bartfab@chromium.org tnagel@chromium.org
Owner: dskaram@chromium.org
Owner: marcuskoehler@chromium.org
Hello!
This bug is receiving this notice because there has been no acknowledgment of its existence in quite a bit of time
- If you are currently working on this bug, please provide an update.
- If you are currently affected by this bug, please update with your current symptoms and relevant logs.

If there has been no updates provided by EOD Wednesday, 12/19/18 (5pm EST), this bug will be archived and can be re-opened at any time deemed necessary.

Thank you!
Status: Archived (was: Assigned)
Due to lack of action this bug has been Archived. If work is still being done on this issue or you are still experiencing this issue please feel free to re-open with the appropriate information.

Sign in to add a comment