diff --git a/CHANGELOG.md b/CHANGELOG.md index d6458e7..5192358 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,7 +3,6 @@ - Updated targetSDK to 34 (Android 14) with compatibility fixes. - More reliable delayed freezing using AlarmManager (thanks parmaster84). -- Support for cross-profile interactions allowlisting (e.g. for Gboard). 1.8 === diff --git a/app/src/main/java/net/typeblog/shelter/util/Utility.java b/app/src/main/java/net/typeblog/shelter/util/Utility.java index a42c439..d3e3eca 100644 --- a/app/src/main/java/net/typeblog/shelter/util/Utility.java +++ b/app/src/main/java/net/typeblog/shelter/util/Utility.java @@ -189,6 +189,7 @@ public class Utility { DevicePolicyManager.FLAG_MANAGED_CAN_ACCESS_PARENT); // Allow ACTION_SEND and ACTION_SEND_MULTIPLE to cross from managed to parent + // TODO: Make this configurable IntentFilter actionSendFilter = new IntentFilter(); actionSendFilter.addAction(Intent.ACTION_SEND); actionSendFilter.addAction(Intent.ACTION_SEND_MULTIPLE); @@ -204,6 +205,7 @@ public class Utility { DevicePolicyManager.FLAG_PARENT_CAN_ACCESS_MANAGED); // Browser intents are allowed from work profile to parent + // TODO: Make this configurable, just as ALLOW_PARENT_PROFILE_APP_LINKING in the next function IntentFilter browsableIntentFilter = new IntentFilter(Intent.ACTION_VIEW); browsableIntentFilter.addCategory(Intent.CATEGORY_BROWSABLE); browsableIntentFilter.addDataScheme("http"); @@ -242,6 +244,8 @@ public class Utility { manager.setSecureSetting(adminComponent, Settings.Secure.INSTALL_NON_MARKET_APPS, "1"); } + // TODO: This should be configured by the user, instead of being enforced each time Shelter starts + // TODO: But we should also have some default restrictions that are set the first time Shelter starts manager.addUserRestriction(adminComponent, UserManager.ALLOW_PARENT_PROFILE_APP_LINKING); }