Provide App Sandbox entitlements for Authorization Services API

Originator:ryan
Number:rdar://23718180 Date Originated:01-Dec-2015 07:35 PM
Status:Open Resolved:
Product:OS X SDK Product Version:10.11
Classification:Enhancement Reproducible:Always
 
Summary:
The entire Authorization Services API is not allowed within a sandboxed app. This completely prevents using something like SFAuthorizationView to add an administrative lock to app-level rights.

In this specific instance I am trying to allow an administrator to lock the editing portions of an app from normal users.

Steps to Reproduce:
Try to use any authorization function in a sandboxed app.

Expected Results:
A successful result as long as there is a valid entitlement set.

Actual Results:
Everything returns an access denied or failure error.

Regression:
This always occurs in the app sandbox.

Notes:
There is no workaround.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!