Skip to content

Work app store #2553

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 88 commits into from
Mar 31, 2025
Merged

Work app store #2553

merged 88 commits into from
Mar 31, 2025

Conversation

fynngodau
Copy link
Contributor

@fynngodau fynngodau commented Sep 22, 2024

Supersedes and contains #2500. Supersedes and contains #2521.

Allows users to download apps to their work profile using the special vending component "Work app store". This component is disabled, and enabled only when a work profile is added (which in turn can only be done by a device or profile admin).

Yet to do:

  • rewrite download code for components (Implement SplitInstallService #2500 (comment))
    • don't allocate RAM for the entire download
    • download directly to installer session
  • add meaningful progress information
    • to store app
    • while downloading in the background through store app
    • while splitinstalling
  • determine and verify meaning of policy field in /getEnterpriseClientPolicy
  • test additional dpc services
  • show Work app store only after adding work account
  • automatic dependency installation (i.e. installing Google Chrome), see https://gitlab.com/AuroraOSS/AuroraStore/-/issues/346)
  • acquire user consent before provisioning work account → new settings screen in microG UI, is shared across accounts (note that custom ROM vendors are expected to grant microG the INTERACT_ACROSS_USERS permission for this)
  • automatically install / remove apps on demand of dpc controller → for future investigations

Mostly up-to-date screenshot:

Screenshot_1727017306

DaVinci9196 and others added 30 commits August 19, 2024 19:22
Verify that work accounts are only added by device owners or profile
owners.

For instance, Microsoft Intune will create a work profile (moving itself
to the work profile in the process) before using the work account servce
to create a work account, so at that point it will already be profile
owner. Apps that are not the profile owner will subsequently not be able
to disable the work account authenticator or remove the work account.
The personal account would not have an owner and thus no application
could enable the work account provider there.
@mar-v-in mar-v-in removed this from the 0.3.7 milestone Mar 12, 2025
@fynngodau fynngodau requested a review from jonathanklee March 20, 2025 16:17
Copy link
Member

@mar-v-in mar-v-in left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@mar-v-in mar-v-in added this to the 0.3.7 milestone Mar 31, 2025
@mar-v-in mar-v-in merged commit dcaa450 into microg:master Mar 31, 2025
1 check passed
@fynngodau fynngodau deleted the workaccount-store branch April 1, 2025 18:21
calyxos-gerrit pushed a commit to CalyxOS/platform_external_microg_GmsCore that referenced this pull request Apr 24, 2025
Per microg/GmsCore#2553
"automatically install / remove apps on demand of dpc controller → for future investigations",
not implemented

Change-Id: Idaf05ef29c556c921d88da93b3a8f861847497d1
calyxos-gerrit pushed a commit to CalyxOS/lfs_prebuilts_calyx_microg that referenced this pull request Apr 24, 2025
* 0.3.6.250932-220 (6f92b0d) (250932232)

Per microg/GmsCore#2553
"automatically install / remove apps on demand of dpc controller → for future investigations",
not implemented

Change-Id: Idaf05ef29c556c921d88da93b3a8f861847497d1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants