From 58d6a934f8c98ba3fb7f950e9eb054ccb9f97c82 Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 3 Jun 2020 17:30:07 -0500 Subject: [PATCH 1/1] PDFjs Permission (78 only) --- README.md | 49 +++++++++++++++++++++++++++++++++++ mac/org.mozilla.firefox.plist | 9 ++++++- windows/de-DE/firefox.adml | 9 +++++++ windows/en-US/firefox.adml | 9 +++++++ windows/es-ES/firefox.adml | 9 +++++++ windows/firefox.admx | 23 ++++++++++++++++ windows/fr-FR/firefox.adml | 9 +++++++ windows/it-IT/firefox.adml | 9 +++++++ windows/zh-TW/firefox.adml | 9 +++++++ 9 files changed, 134 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e77e9d8..0e79591 100644 --- a/README.md +++ b/README.md @@ -69,6 +69,7 @@ Policies can be specified using the [Group Policy templates on Windows](https:// | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page. | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page. | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager. +| **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer. | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications. | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed. | **[`Preferences`](#preferences)** | Set and lock some preferences. @@ -2964,6 +2965,54 @@ Value (string): } } ``` +### PDFjs +Disable or configure PDF.js, the built-in PDF viewer. + +If `Enabled` is set to false, the built-in PDF viewer is disabled. + +If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +**Compatibility:** Firefox 77, Firefox ESR 68.9\ +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions` + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0 +``` +#### Windows (Intune) +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions +``` +Value (string): +``` +or +``` +#### macOS +``` + + PDFjs + + Enabled + | + + | + + +``` +#### policies.json +``` +{ + "policies": { + "PSFjs": { + "Enabled": true | false, + "EnablePermissions": true | false + } +} +``` ### Permissions Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below. diff --git a/mac/org.mozilla.firefox.plist b/mac/org.mozilla.firefox.plist index aa7f05a..f32e96d 100644 --- a/mac/org.mozilla.firefox.plist +++ b/mac/org.mozilla.firefox.plist @@ -218,7 +218,7 @@ Enabled - + Locked Extensions @@ -335,6 +335,13 @@ PasswordManagerEnabled + PDFjs + + Enabled + + EnablePermissions + + Permissions Camera diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 8fa7042..b08581e 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -50,6 +50,7 @@ Benutzer-Benachrichtigungen Disabled Ciphers Encrypted Media Extensions + PDFjs Erlaubte Seiten Gesperrte Seiten Automatisches Update @@ -774,6 +775,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 26b31c4..caeaade 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -50,6 +50,7 @@ User Messaging Disabled Ciphers Encrypted Media Extensions + PDFjs Allowed Sites Blocked Sites Application Autoupdate @@ -776,6 +777,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: diff --git a/windows/es-ES/firefox.adml b/windows/es-ES/firefox.adml index 6be7969..e5916bb 100644 --- a/windows/es-ES/firefox.adml +++ b/windows/es-ES/firefox.adml @@ -50,6 +50,7 @@ User Messaging Disabled Ciphers Encrypted Media Extensions + PDFjs Sitios permitidos Sitios bloqueados Application Autoupdate @@ -776,6 +777,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false. Para una descripción de la preferencia, visite: diff --git a/windows/firefox.admx b/windows/firefox.admx index 7ae6e26..4008453 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -106,6 +106,9 @@ + + + @@ -3559,5 +3562,25 @@ + + + + + + + + + + + + + + + + + + + + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 5e697ba..7513de6 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -50,6 +50,7 @@ User Messaging Disabled Ciphers Encrypted Media Extensions + PDFjs Sites autorisés Sites bloqués Application Autoupdate @@ -775,6 +776,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false. Pour une description de la préférence, voir: diff --git a/windows/it-IT/firefox.adml b/windows/it-IT/firefox.adml index 81e03d2..4eeafab 100644 --- a/windows/it-IT/firefox.adml +++ b/windows/it-IT/firefox.adml @@ -50,6 +50,7 @@ Messaggi utente Cifrari disabilitati Encrypted Media Extensions + PDFjs Siti consentiti Siti bloccati Aggiornamento automatico applicazione @@ -776,6 +777,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile. Per una descrizione della preferenza, si veda: diff --git a/windows/zh-TW/firefox.adml b/windows/zh-TW/firefox.adml index 39d89e7..6ceff98 100644 --- a/windows/zh-TW/firefox.adml +++ b/windows/zh-TW/firefox.adml @@ -50,6 +50,7 @@ 顯示給使用者的訊息 Disabled Ciphers Encrypted Media Extensions + PDFjs 允許的網站 封鎖的網站 應用程式自動更新 @@ -774,6 +775,14 @@ If this policy is enabled or not configured, encrypted media extensions (like Wi If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. If this policy is not disabled or not configured, it has no effect. + Enable PDFjs + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. 若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。 若需要偏好設定的詳細說明，請參考： -- 2.34.1