New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 773666 link

Starred by 9 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Feature



Sign in to add a comment

VideoCaptureAllowedUrls is not exposed via cpanel

Reported by teststud...@m289.org, Oct 11 2017

Issue description

UserAgent: Mozilla/5.0 (X11; CrOS armv7l 9592.96.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.114 Safari/537.36

Steps to reproduce the problem:
1. Looking for a policy that controls allow/deny cam
2. Google Admin does not have a section for this policy
3. Would like to See a policy for this in Google Admin.

What is the expected behavior?
I would like to control what apps/extensions/websites are allowed to use the Chromebooks camera function. I work for a elementary school district & having to click allow manually for every user that logs into our numerous chromebooks is becoming an issue for the teachers. For example: one of our teachers wants to use the snap shot function in google slides but it first asks for permission for google docs to use the camera. some of our younger grades require alot of attention when asking them to manually preform this task and its adding more stress to the teacher. I thought Google admin would allow me to control this camera permission much like the exception portion in Google Admin for things like pluggins and extensions.

What went wrong?
I was looking for a solution in Google admin to control the allow/deny permissions for the camera on our chromebooks. I would like to restrict the camera use only to certain sites that our teachers deem appropriate. I would like a policy section for the camera with an exception list so I can allow only those sites access to the camera. Much like the exception area for plugins. The manual option  to allow for each student on our many chromebooks is  too time consuming for me as a tech & frustrating for the teachers.

Did this work before? No 

Chrome version: 60.0.3112.114  Channel: n/a
OS Version: 9592.96.0
Flash Version:
 

Comment 1 by pmarko@chromium.org, Oct 12 2017

Cc: pmarko@chromium.org atwilson@chromium.org
+Drew

It seems that we might already have a policy for this (VideoCaptureAllowedUrls) but I'm not sure if/how it's exposed on CPanel. Would you know?
Cc: dkalin@google.com
Good question - I think we originally spun this out for kiosk sessions, but maybe this has also been enabled for user sessions.

Dennis? How can one set VideoCaptureAllowedUrls via CPanel?

Comment 3 by dkalin@google.com, Oct 12 2017

Cc: zhanlu@chromium.org
Zhanlu - I only found that we have this setting in device settings, did we not expose it in CPanel for users?

Comment 4 by pmarko@chromium.org, Oct 13 2017

Cc: maxkirsch@chromium.org
+Max might know more about the background as well.

Comment 5 by zhanlu@chromium.org, Oct 13 2017

Cc: blumberg@chromium.org nrpeter@chromium.org
Right now, we allow to control third party websites to use camera through this device policy "Single Sign-On Camera Permissions": https://chromium.googlesource.com/chromium/src/+/master/components/policy/resources/policy_templates.json#9124

,and this user policy "Video Input" : https://chromium.googlesource.com/chromium/src/+/master/components/policy/resources/policy_templates.json#6138

To have fine-grained control over apps and extensions: I think you need this policy "Extension Settings": https://chromium.googlesource.com/chromium/src/+/master/components/policy/resources/policy_templates.json#2491

I added the owner of this policy Nick and Matt Blumberg to confirm if this new policy can meet the requirements. 
I'd agree with Zhanlu@ that It sounds like the policies you want are a combination of VideoCaptureAllowed and VideoCapturedAllowedUrls.

https://www.chromium.org/administrators/policy-list-3#VideoCaptureAllowed
https://www.chromium.org/administrators/policy-list-3#VideoCaptureAllowedUrls

If you don't already control which extensions can be installed, you'll soon be able to block extensions which access the webcam (available soon) using the "ExtensionSettings" policy.
Zhanlu, do you expose UI on CPanel to set VideoCaptureAllowedUrls?

Comment 8 by zhanlu@chromium.org, Oct 17 2017

No, VideoCaptureAllowedUrls is not exposed. Only VideoCaptureAllowed is available on CPanel.
Labels: -Type-Bug Type-Feature
Owner: dskaram@chromium.org
Summary: VideoCaptureAllowedUrls is not exposed via cpanel (was: I would like to be able to Control what apps/extensions/website can use the camera in Google Admin)
OK, this is a feature request then. Over to David to prioritize.
Status: Assigned (was: Unconfirmed)
Cc: msnoxell@chromium.org
Owner: marcuskoehler@chromium.org
Cc: vkhabarov@chromium.org
Labels: Hotlist-Enterprise
Please note that there is a similar request for AudioCaptureAllowedUrls setting in Admin Console
Forgot to add link - crbug.com/442001

Sign in to add a comment