"Missing" locked down settings

Get help with installation and configuration of OWS. Please post specific bug reports, pull requests, or source code extensions on github.
javaapp
Posts: 39
Joined: 20 May 2020, 18:34

"Missing" locked down settings

Post by javaapp »

I Just tried locking down all possible settings and then examining the "OpenWebstart Settings" app to see the user experience. I have some questions about settings that are not able to locked down (at least as far as I can tell)

JVM Manager Panel: Cannot lockdown the following settings?
  • Add local...
  • Find local
  • Deactivate/Remove
Cache Panel: Why keep "Limit cache size" checkbox active? When all settings are locked down it has little purpose AFAICT

Remove Debugging Panel: Any way to disable or remove this panel entirely?

Security Panel: Any way to lockdown the first 5 checkboxes?
  • Allow users to grant permissions to signed content
  • Allow users to grant permissions to content from an untrusted authority
  • Warn if site certificate does not match hostname
  • Show sandbox warning banner
  • Allow user to accept JNLP security requests
Thanks! The product looks really good by the way!

Stephan Classen
Posts: 185
Joined: 27 Mar 2020, 09:55

Re: "Missing" locked down settings

Post by Stephan Classen »

javaapp wrote: 03 Jun 2020, 06:10 JVM Manager Panel: Cannot lockdown the following settings?
  • Add local...
  • Find local
  • Deactivate/Remove
The list of JVMs are stored in a different location as the rest of the settings.
Currently there is no possibility to limit the user in manipulating the known JVMs.
javaapp wrote: 03 Jun 2020, 06:10 Cache Panel: Why keep "Limit cache size" checkbox active? When all settings are locked down it has little purpose AFAICT
The cache panel is still an original ITW panel. As such it does not support deactivating the controls if an option is locked.
Never the less a the options can be locked and set by a system property.
javaapp wrote: 03 Jun 2020, 06:10 Remove Debugging Panel: Any way to disable or remove this panel entirely?
Currently there is no possibility to disable/hide entire panels
javaapp wrote: 03 Jun 2020, 06:10 Security Panel: Any way to lockdown the first 5 checkboxes?
  • Allow users to grant permissions to signed content
  • Allow users to grant permissions to content from an untrusted authority
  • Warn if site certificate does not match hostname
  • Show sandbox warning banner
  • Allow user to accept JNLP security requests
The security panel is still an original ITW panel. As such it does not support deactivating the controls if an option is locked.
Never the less a the options can be locked and set by a system property.

Post Reply