-
Notifications
You must be signed in to change notification settings - Fork 278
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use the LauncherApps API to view work profile apps in no-root mode #935
Comments
Launcher API is incredibly limited. It will never be possible to get the entire list of apps as there are too many restrictions with it.
Also, the information returned by
You still cannot configure anything in App Manager (seems to be only possible via Delegation API #411) if you haven't got root or ADB. You can, at best, open the app from App Manager or view it in the app settings. |
I see. I only suggested this API since a developer said it was an alternative to the flag, but looks like it's not as powerful. And my mistake, I only meant to say view, not view and configure. Since #910 is fixed now, that means App Manager is able to view work profile apps while in no-root mode, correct? If so, then it's probably best to close this as not planned. |
I believe so, yes. If this fix is widely adopted, then we may need to consider this again. But for now, I will not work on this as I have more important things at hand. However, if you ask me, an app without explicitly set as the default launcher and/or declaring some dangerous permission should not be able to access the apps of the work profiles nor should it be able to query the amount of managed profiles the user has. That is, LauncherApps functionalities aren't backed by any permissions whatsoever, thereby, allowing any non-launcher apps to query the amount of managed profiles or the apps installed in them. This is, to me, a serious breach of privacy. |
I fully agree! I would prefer if APIs such as this are blocked unless the app itself is set as the default launcher, or have obtained some dangerous permission. I think I'll try to request this to the developers of Graphene OS later. |
Please check before submitting an issue
Describe a description of the new feature
This would allow App Manager to view apps installed within the work profile without the use of ADB or root.
Describe the solution you'd like
I'd like for App Manager to use the LauncherApps API to view apps installed within the work profile. It currently uses the
MATCH_UNINSTALLED_PACKAGES
flag, which only reveals the work profile's package list. This results in the user not being able to view or configure any package installed within the work profile through App Manager, unless ADB or root is granted.Furthermore, this flag relies on a hack implemented since 2016 for compatibility purposes between old third-party launchers and the work profile, as discussed here. It has been removed from Graphene OS upon this reveal, and most likely from AOSP eventually.
Additional context
I'm creating a separate issue for this request, as #910 is closed and not concise. This would also make it easier to address in the future, in case you might've forgotten about the previous issue.
The text was updated successfully, but these errors were encountered: