Skip to content

Commit 803c1c6

Browse files
rtroutonrtrouton
committed
Uploading Privileges 1.5.3 source code, which includes new management options for the ReasonRequired management key.
Uploading Privileges 1.5.3 source code, which includes new management options for the ReasonRequired management key. Also uploading an updated Example_ReasonRequired macOS configuration profile which includes the new management options.
1 parent d99f52c commit 803c1c6

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

41 files changed

+594
-323
lines changed

‎application_management/example_profiles/ReasonRequired/Example_ReasonRequired.mobileconfig‎

Lines changed: 115 additions & 80 deletions
Original file line numberDiff line numberDiff line change
@@ -1,83 +1,118 @@
11
<?xml version="1.0" encoding="UTF-8"?>
22
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
33
<plist version="1.0">
4-
<dict>
5-
<key>PayloadContent</key>
6-
<array>
7-
<dict>
8-
<key>PayloadContent</key>
9-
<dict>
10-
<key>corp.sap.privileges</key>
11-
<dict>
12-
<key>Forced</key>
13-
<array>
14-
<dict>
15-
<key>mcx_preference_settings</key>
16-
<dict>
17-
<!--
18-
key: ReasonRequired
19-
value: a boolean
20-
21-
If set to true, the user must provide a reason for needing admin rights.
22-
The reason will be logged.
23-
-->
24-
<key>ReasonRequired</key>
25-
<true/>
26-
<!--
27-
key: ReasonMinLength
28-
value: a positive integer
29-
30-
If "ReasonRequired" is set to true, this key specifies the minimum number
31-
of characters the user has to enter as the reason for becoming an admin.
32-
If not set, the value defaults to 10. The text field is limited to a
33-
maximum of 100 characters, so values greater than 100 have no effect.
34-
Please be aware that enabling this option, disables the "Toggle Privileges"
35-
entry in the Privileges Dock tile menu.
36-
-->
37-
<key>ReasonMinLength</key>
38-
<integer>5</integer>
39-
</dict>
40-
</dict>
41-
</array>
42-
</dict>
43-
</dict>
44-
<key>PayloadDescription</key>
45-
<string/>
46-
<key>PayloadDisplayName</key>
47-
<string>Privileges configuration</string>
48-
<key>PayloadEnabled</key>
49-
<true/>
50-
<key>PayloadIdentifier</key>
51-
<string>com.apple.ManagedClient.preferences.36132147-235E-4663-ADA8-2664C67C4DD2</string>
52-
<key>PayloadOrganization</key>
53-
<string>SAP SE</string>
54-
<key>PayloadType</key>
55-
<string>com.apple.ManagedClient.preferences</string>
56-
<key>PayloadUUID</key>
57-
<string>36132147-235E-4663-ADA8-2664C67C4DD2</string>
58-
<key>PayloadVersion</key>
59-
<integer>1</integer>
60-
</dict>
61-
</array>
62-
<key>PayloadDescription</key>
63-
<string>Configures the Privileges app.</string>
64-
<key>PayloadDisplayName</key>
65-
<string>Privileges configuration</string>
66-
<key>PayloadEnabled</key>
67-
<true/>
68-
<key>PayloadIdentifier</key>
69-
<string>CF401A42-35CA-4DA6-9123-5A49C87ECB5A</string>
70-
<key>PayloadOrganization</key>
71-
<string>SAP SE</string>
72-
<key>PayloadRemovalDisallowed</key>
73-
<true/>
74-
<key>PayloadScope</key>
75-
<string>System</string>
76-
<key>PayloadType</key>
77-
<string>Configuration</string>
78-
<key>PayloadUUID</key>
79-
<string>50870D16-7AAD-478B-BFFE-BED09499F7E0</string>
80-
<key>PayloadVersion</key>
81-
<integer>1</integer>
82-
</dict>
83-
</plist>
4+
<dict>
5+
<key>PayloadContent</key>
6+
<array>
7+
<dict>
8+
<key>PayloadContent</key>
9+
<dict>
10+
<key>corp.sap.privileges</key>
11+
<dict>
12+
<key>Forced</key>
13+
<array>
14+
<dict>
15+
<key>mcx_preference_settings</key>
16+
<dict>
17+
<!--
18+
key: ReasonRequired
19+
value: a boolean
20+
21+
If set to true, the user must provide a reason for needing admin rights.
22+
The reason will be logged.
23+
-->
24+
<key>ReasonRequired</key>
25+
<true />
26+
<!--
27+
key: ReasonMinLength
28+
value: a positive integer below 100
29+
30+
If "ReasonRequired" is set to true, this key specifies the minimum number
31+
of characters the user has to enter as the reason for becoming an admin.
32+
If not set, the value defaults to 10. The text field is limited to a
33+
maximum of 100 characters, so values greater than 100 have no effect.
34+
Please be aware that enabling this option, disables the "Toggle Privileges"
35+
entry in the Privileges Dock tile menu.
36+
-->
37+
<key>ReasonMinLength</key>
38+
<integer>20</integer>
39+
<!--
40+
key: ReasonMaxLength
41+
value: a positive integer below 100
42+
43+
If "ReasonRequired" is set to true, this key specifies the maximum number
44+
of characters the user can enter as the reason for becoming an admin.
45+
If not set, the value defaults to 100. If a value > 100 is specified or
46+
if "ReasonMaxLength" is <= "ReasonMinLength", the value is set to default.
47+
-->
48+
<key>ReasonMaxLength</key>
49+
<integer>30</integer>
50+
<!--
51+
key: ReasonPresetList
52+
value: an array of strings
53+
54+
If "ReasonRequired" is set to true, this key allows to pre-define a list
55+
of possible reasons (for becoming an admin) the user can choose from. If
56+
set, an additional pop-up menu will appear in the dialog box. This only
57+
works for the GUI version of Privileges.
58+
-->
59+
<key>ReasonPresetList</key>
60+
<array>
61+
<dict>
62+
<key>default</key>
63+
<string>Just for fun</string>
64+
</dict>
65+
<dict>
66+
<key>default</key>
67+
<string>For installing software</string>
68+
</dict>
69+
<dict>
70+
<key>default</key>
71+
<string>Don't know</string>
72+
</dict>
73+
</array>
74+
</dict>
75+
</dict>
76+
</array>
77+
</dict>
78+
</dict>
79+
<key>PayloadDescription</key>
80+
<string />
81+
<key>PayloadDisplayName</key>
82+
<string>Privileges configuration</string>
83+
<key>PayloadEnabled</key>
84+
<true />
85+
<key>PayloadIdentifier</key>
86+
<string>com.apple.ManagedClient.preferences.36132147-235E-4663-ADA8-2664C67C4DD2</string>
87+
<key>PayloadOrganization</key>
88+
<string>SAP SE</string>
89+
<key>PayloadType</key>
90+
<string>com.apple.ManagedClient.preferences</string>
91+
<key>PayloadUUID</key>
92+
<string>36132147-235E-4663-ADA8-2664C67C4DD2</string>
93+
<key>PayloadVersion</key>
94+
<integer>1</integer>
95+
</dict>
96+
</array>
97+
<key>PayloadDescription</key>
98+
<string>Configures the Privileges app.</string>
99+
<key>PayloadDisplayName</key>
100+
<string>Privileges configuration</string>
101+
<key>PayloadEnabled</key>
102+
<true />
103+
<key>PayloadIdentifier</key>
104+
<string>CF401A42-35CA-4DA6-9123-5A49C87ECB5A</string>
105+
<key>PayloadOrganization</key>
106+
<string>SAP SE</string>
107+
<key>PayloadRemovalDisallowed</key>
108+
<true />
109+
<key>PayloadScope</key>
110+
<string>System</string>
111+
<key>PayloadType</key>
112+
<string>Configuration</string>
113+
<key>PayloadUUID</key>
114+
<string>50870D16-7AAD-478B-BFFE-BED09499F7E0</string>
115+
<key>PayloadVersion</key>
116+
<integer>1</integer>
117+
</dict>
118+
</plist>

‎source/Constants.h‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
/*
2+
Constants.h
3+
Copyright 2022 SAP SE
4+
5+
Licensed under the Apache License, Version 2.0 (the "License");
6+
you may not use this file except in compliance with the License.
7+
You may obtain a copy of the License at
8+
9+
http://www.apache.org/licenses/LICENSE-2.0
10+
11+
Unless required by applicable law or agreed to in writing, software
12+
distributed under the License is distributed on an "AS IS" BASIS,
13+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14+
See the License for the specific language governing permissions and
15+
limitations under the License.
16+
*/
17+
18+
#define kMTAdminGroupID 80
19+
#define kMTDockTimeoutDefault 20
20+
#define kMTReasonMinLengthDefault 10
21+
#define kMTReasonMaxLengthDefault 100
22+
#define kMTFixedTimeoutValues @[@0, @5, @10, @20, @60]
23+
24+
#define kMTDefaultsToggleTimeout @"DockToggleTimeout"
25+
#define kMTDefaultsToggleMaxTimeout @"DockToggleMaxTimeout"
26+
#define kMTDefaultsEnforcePrivileges @"EnforcePrivileges"
27+
#define kMTDefaultsAuthRequired @"RequireAuthentication"
28+
#define kMTDefaultsLimitToUser @"LimitToUser"
29+
#define kMTDefaultsLimitToGroup @"LimitToGroup"
30+
#define kMTDefaultsRequireReason @"ReasonRequired"
31+
#define kMTDefaultsReasonMinLength @"ReasonMinLength"
32+
#define kMTDefaultsReasonMaxLength @"ReasonMaxLength"
33+
#define kMTDefaultsReasonPresets @"ReasonPresetList"
34+
#define kMTDefaultsRemoteLogging @"RemoteLogging"
35+
#define kMTDefaultsRLServerType @"ServerType"
36+
#define kMTDefaultsRLServerAddress @"ServerAddress"
37+
#define kMTDefaultsRLServerPort @"ServerPort"
38+
#define kMTDefaultsRLEnableTCP @"EnableTCP"
39+
#define kMTDefaultsRLSyslogOptions @"SyslogOptions"
40+
#define kMTDefaultsRLSyslogFacility @"LogFacility"
41+
#define kMTDefaultsRLSyslogSeverity @"LogSeverity"
42+
#define kMTDefaultsRLSyslogMaxSize @"MaximumMessageSize"

‎source/MTAuthCommon.h‎

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/*
22
MTAuthCommon.h
3-
Copyright 2016-2020 SAP SE
3+
Copyright 2016-2022 SAP SE
44
55
Licensed under the Apache License, Version 2.0 (the "License");
66
you may not use this file except in compliance with the License.
@@ -62,8 +62,4 @@
6262
*/
6363
+ (NSString*)getSigningAuthorityWithError:(NSError**)error;
6464

65-
#define ADMIN_GROUP_ID 80
66-
#define DEFAULT_DOCK_TIMEOUT 20
67-
#define FIXED_TIMEOUT_VALUES {0, 5, 10, 20, 60}
68-
6965
@end

‎source/MTAuthCommon.m‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/*
22
MTAuthCommon.m
3-
Copyright 2016-2020 SAP SE
3+
Copyright 2016-2022 SAP SE
44
55
Licensed under the Apache License, Version 2.0 (the "License");
66
you may not use this file except in compliance with the License.

‎source/MTIdentity.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/*
22
MTIdentity.h
3-
Copyright 2016-2020 SAP SE
3+
Copyright 2016-2022 SAP SE
44
55
Licensed under the Apache License, Version 2.0 (the "License");
66
you may not use this file except in compliance with the License.

‎source/MTIdentity.m‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/*
22
MTIdentity.m
3-
Copyright 2016-2020 SAP SE
3+
Copyright 2016-2022 SAP SE
44
55
Licensed under the Apache License, Version 2.0 (the "License");
66
you may not use this file except in compliance with the License.

0 commit comments

Comments
 (0)