Host permissions lost on extension upgrade of enterprise installed extension

Add-ons Development
1

Hi.

When an extension is force-installed via policy (on macOS), it gets its host_permissions automatically approved and the “Access your data for all web sites” option enabled by default. This is what we want and it is working nicely.

However, we noticed that after publishing a new version on the AMO and FF updated the extension, the option “Access your data for all web sites” was turned off.

There is a related open bug here 1904054 - When an mv3 extension is force_installed via policy, users should not be able to change host permissions that we filed (on GH) a year ago. If that bug gets fixed, I supposed it would solve this issue, but as this query is not exactly on the same topic, I wanted to ask here first if there is something we can do to to prevent the option from being turned off.

This is an example of our manifest with host_permissions for all sites.

{
  "manifest_version": 3,
  "name": "Flexera Web Metering",
  "description": "This extension tracks web application use for the purpose of license compliance and cost optimization.",
  "version": "0.0.1",
  "author": "Flexera",
  "icons": {
    "16": "icons/Flexera_mark-only_RGB_full-color_16x16.png",
    "32": "icons/Flexera_mark-only_RGB_full-color_32x32.png",
    "48": "icons/Flexera_mark-only_RGB_full-color_48x48.png",
    "64": "icons/Flexera_mark-only_RGB_full-color_64x64.png",
    "128": "icons/Flexera_mark-only_RGB_full-color_128x128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/Flexera_mark-only_RGB_full-color_16x16.png",
      "32": "icons/Flexera_mark-only_RGB_full-color_32x32.png",
      "48": "icons/Flexera_mark-only_RGB_full-color_48x48.png",
      "64": "icons/Flexera_mark-only_RGB_full-color_64x64.png",
      "128": "icons/Flexera_mark-only_RGB_full-color_128x128.png"
    }
  },
  "background": {
    "scripts": [
      "background.js"
    ]
  },
  "permissions": [
    "webRequest",
    "nativeMessaging"
  ],
  "host_permissions": [
    "*://*/*"
  ],
  "content_security_policy": {
    "extension_pages": "script-src 'self'; default-src 'self' http://localhost:40400 https://localhost:40400"
  },
  "browser_specific_settings": {
    "gecko": {
      "strict_min_version": "142.0",
      "id": "webmetering@flexera.com",
      "data_collection_permissions": {
        "required": [
          "personallyIdentifyingInfo",
          "browsingActivity"
        ]
      }
    }
  }
}
1 Like