New issue
Advanced search Search tips

Issue 907795 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Feature



Sign in to add a comment

Figure out ways to merge cloud and platform policy

Project Member Reported by pastarmovj@chromium.org, Nov 22

Issue description

With the uptake of cloud management on desktop we see more requests of people having to manage a mix of the two. Currently platform policy always overwrites cloud policy which has been chosen as a sane safe default but in many cases is not sufficient. Especially for list policies like extension forced installation. Figuring out the right mix of both is necessary for making the transition to cloud management a smoother experience.
 
Cc: privard@chromium.org zmin@chromium.org
Labels: Enterprise-Triaged
That sounds good to me.

The way I see it is the following:
- Machine platform takes precedence over user platform (current behavior), giving us resolved platform policies
- Resolved platform policies takes precedence over machine cloud (current behavior) except for lists that merge (new behavior)
- Signed in user cloud cannot override anything and do not get merged (current behavior)

This would allow us to keep the current behavior as is except for the machine cloud policies. I don't think we should let signed in policies get merged, that would have impact on existing deployments.

Thoughts?
I will summarize this in a doc and circulate around for discussion. There are some edge cases there like json policies which are dictionaries or lists themselves (e.g. ExtensionSettings).
SGTM!

Sign in to add a comment