Post not yet marked as solved
Post marked as unsolved with 0 replies, 1,567 views
We've noticed that the Screen Recording permissions (System Preferences > Security & Privacy > Privacy > Screen Recording) are not protected by admin password. Other permissions, such as Accessibility, are not accessible for a non-administrative user. But the Screen Recording permissions can be changed by anyone. In result, any non-administrative user can revoke the Screen Recording permissions granted by administrator.We hope that this is rather a bug than an attempt to move part of Privacy settings to a "per-user" level. All Privacy settings are clearly administrative.Moving any Privacy settings to a "per-user" level would cause:- Inability of system administrator to restrict permissions for all non-administrative users.- Endless logical collisions with any kind of remote access software. For example: The user simply can not allow the remote access software to capture the screen if he can not see the screen or control the computer.These collisions affect other permissions as well. However if all Privacy settings will remain global and accessible for admin only, the the access to required permissions can be granted by administrator during software deployment. If any permission will be moved to a "per-user" level, the system administrator looses control over the system and deployment.Additionally, the Screen Recording permissions UI still does not have [+]/[-] buttons, which means that admin can not grant permissions manually. Other Privacy settings provide such functionality, which is very useful.