TCC profile and Authorization

Question

Created Oct ’20

Replies 1

Boosts 0

Views 1.8k

Participants 2

macOS 11 Beta 9 introduces a new option for TCC profile to allow normal user account to grant Screen Recording (and audio) permissions to apps.

Is there a way to build one profile which can be deployed to both macOS 10.15 and 11 ?

If we want to deny access, and therefore send:
Allowed=False
Authorization=Deny

Big Sur rejects the profile.

If we want to allow access to standard user, the profile will be rejected if we do:
Allowed - not set (as it's invalid for Screen recording)
Authorization=AllowStandardUserToSetSystemService,

Catalina rejects the profile because Allowed is missing.

Boost

Answer 1

Engineer OP

Apple

Oct ’20

There is no way to build a single profile for both. The reason why the payload isn’t backwards compatible is because Big Sur introduces a new key, Authorization, which supersedes the previous Allowed key. The Allowed key is still supported, for forwards compatibility, but you have to choose either Authorization or Allowed for each TCC authorization record in the PPPC payload.

0