Open Radar

 
Summary:
In looking at Apple Configurator 2's interface for creating a Restrictions profile, the interface has a nested view for these three options:

parent: Allow installing apps using Apple Configurator and iTunes (allowAppInstallation)
child: Allow installing apps using App Store (allowUIAppInstallation)
grandchild: Allow automatic app downloads (allowAutomaticAppDownloads)

I will refer to the options with the above labels.

I did some testing where I turned off each option one at a time and watched what happened on an iPad. I notice that when the parent is unchecked, it also implements the grandchild - it effectively unchecks the grandchild. This makes sense, why have options for automatic downloading if the App Store has been disabled?

The bug is this: when the child is unchecked to remove the App Store, it does NOT implement the grandchild. Based on the nested structure of these Restrictions, it appears that this is NOT intended behavior (unchecking the child grays out the grandchild in the Configurator 2 interface thus it is not supposed to matter what it is set to). It should effectively uncheck the grandchild.

In addition, this is confusing to MDM administrators. The setting of the grandchild now makes a difference even though it has been hidden from view by unchecking the child.

Steps to Reproduce:
1. Create Restrictions profile with 'Allow installing apps using App Store' unchecked. Leave the other two checked.
2. Deploy to iPad.
3. Undeploy from iPad.
4. Create Restrictions profile with 'Allow installing apps using App Store' unchecked, but first also uncheck 'Allow automatic app downloads'.
5. Deploy to iPad.


Expected Results:
In step 2 I expect to see the options for Settings -> iTunes & App Store -> Automatic Downloads -> Apps and Updates to both disappear from view. They are not necessary with a disabled App Store.

In step 5 I still expect the behavior of step 2, since it is a grayed out setting and it shouldn't matter what it is set to.

Actual Results:
In step 2 those options are still visible.

In step 5 I do see those options disappear.