Avoid entitlements, notarization etc. for in-house Mac apps

I'm making (non-sandboxed) Mac applications for in-house use (which is a controlled, and hence trusted, environment).

I waste a lot of time debugging and meeting notarization and the many other app deployment requirements (entitlements, permissions for scripting other apps, accessing "protected" folders etc.). This is costly for us, too, both in time and financially.

All these security measures should not be necessary in our controlled environment - we inherently trust our own software, after all.

Is there some way to disable these checks, or at least some of them? Perhaps with special certificates that broadly grant all these permissions to all our own apps on our own Macs?

Replies

Some of those restrictions are part of the operating system. You may be able to bypass those with an enterprise developer account and/or MDM profiles. I've never used those so I don't know what capabilities are possible.