MeshCentral icon indicating copy to clipboard operation
MeshCentral copied to clipboard

Set the default "Connect" option for Desktop/Terminal/Files between "Ask Consent", "Privacy Bar", or both

Open dxdemetriou opened this issue 2 years ago • 11 comments

Is your feature request related to a problem? Please describe. -By selecting some option on "User Consent" either from "Device (Group)" or "User (Group)", there is no an option to allow the bypassing of the "Ask Consent" when it's enabled, like the enforcing of "Ask Consent" when it's disabled.

Describe the solution you'd like -Possibility of setting the default option you want on the "Connect button" when the "Prompt for user consent" is not enforced

Describe alternatives you've considered -Possibility of setting the "User Consent" options into the "Device (Group)" and "User (Group)", if you need them to be defaults or enforced.

dxdemetriou avatar Sep 16 '22 22:09 dxdemetriou

(I am on vacation until October 18th) Would this this a domain wide setting? Like, for this domain, all users will have user consent be the default for "Connect"?

Ylianst avatar Sep 17 '22 21:09 Ylianst

Have nice vacations :)

Actually I mean it more like this:

Screenshot_20220918-095610_Chrome

If the "Prompt for user consent" is checked then the second option to be greyed out. When the "Prompt for user consent" is unchecked then to be an option for the "Connect" button.

Let's say, for example, on windows 11 there are some cases that the "Allow" windows never comes to the user, or the user is pressing on some places on the window which makes it no responsive (I'll check later about this), so I prefer the technicians supporting users instead of "pressing the right click and select each time the consent option", to have the "Connect" button with the prompt to be by default (with left click) and if not works then to bypass it (with right click).

On other cases let's say for labs maintenance, neither consent should be needed.

If it's a domain option, it should have an effect when "Prompt for user consent" is unchecked, but there should be also the right click options on the "Connect all" button" let's say for labs maintenance.

Screenshot_20220918_102001

dxdemetriou avatar Sep 18 '22 08:09 dxdemetriou

For domain wide setting, probably with settings like "defaultConnectButtonOption" and "defaultConnectAllButtonOption", but I think it'll be more customizable to be per devices group and just to select what option you need to be the default on their Connect and Connect All buttons.

dxdemetriou avatar Sep 18 '22 08:09 dxdemetriou

Why not just use auto-accept when not answered

https://github.com/Ylianst/MeshCentral/blob/7c31245aa893e7cf45c3b8d34358b7543d03dce1/meshcentral-config-schema.json#L603

silversword411 avatar Sep 18 '22 11:09 silversword411

Why not just use auto-accept when not answered

https://github.com/Ylianst/MeshCentral/blob/7c31245aa893e7cf45c3b8d34358b7543d03dce1/meshcentral-config-schema.json#L603

I thought it as more secure and more accident-free to give the technician this option whether it's needed instead of being by default automatic for everyone. And probably it'll not work after the crashing of the "Allow" window, I'll find one computer with this problem later to try it.

As administrator you can change the option and set it back later, but for technician I think it's better when an alternative option is needed to not be the default.

dxdemetriou avatar Sep 18 '22 13:09 dxdemetriou

I guess I'm a little confused what you're asking then, I'll leave this for someone else I guess.

By default the right-click of the connect button gives the tech the option of choosing whichever connection they want.

If you're trying to restrict techs...the options are there to do that.

If you're trying to dynamically give different permissions based on context....that sounds complicated.

silversword411 avatar Sep 18 '22 16:09 silversword411

I guess I'm a little confused what you're asking then, I'll leave this for someone else I guess.

By default the right-click of the connect button gives the tech the option of choosing whichever connection they want.

If you're trying to restrict techs...the options are there to do that.

If you're trying to dynamically give different permissions based on context....that sounds complicated.

Just the ability for replacing the option that the left-click is doing on the "Connect button", and the other options to be available with the right click.

For example, if I have one device group with "Prompt for user consent" unchecked, I need by left-clicking on the "Connect button" to use the "Ask Consent + Bar", and by right-clicking to have the other two options on this group. In this way, the techs will not have to right-click and select each time, just to right-click and select if needed.

dxdemetriou avatar Sep 18 '22 16:09 dxdemetriou

I guess I'm a little confused what you're asking then, I'll leave this for someone else I guess. By default the right-click of the connect button gives the tech the option of choosing whichever connection they want. If you're trying to restrict techs...the options are there to do that. If you're trying to dynamically give different permissions based on context....that sounds complicated.

Just the ability for replacing the option that the left-click is doing on the "Connect button", and the other options to be available with the right click.

For example, if I have one device group with "Prompt for user consent" unchecked, I need by left-clicking on the "Connect button" to use the "Ask Consent + Bar", and by right-clicking to have the other two options on this group. In this way, the techs will not have to right-click and select each time, just to right-click and select if needed.

this already exists?

if you select a computer group you can then select pencil next to User Consent and select the option 'Prompt for user consent' and 'Show connection toolbar' then ANY user who connects automatically sends 'Ask consent + bar' AND its the same for a per user/user group basis, select the pencil next to 'User Consent' on each of the pages

or do you want to do something different?

si458 avatar Sep 18 '22 17:09 si458

I guess I'm a little confused what you're asking then, I'll leave this for someone else I guess. By default the right-click of the connect button gives the tech the option of choosing whichever connection they want. If you're trying to restrict techs...the options are there to do that. If you're trying to dynamically give different permissions based on context....that sounds complicated.

Just the ability for replacing the option that the left-click is doing on the "Connect button", and the other options to be available with the right click. For example, if I have one device group with "Prompt for user consent" unchecked, I need by left-clicking on the "Connect button" to use the "Ask Consent + Bar", and by right-clicking to have the other two options on this group. In this way, the techs will not have to right-click and select each time, just to right-click and select if needed.

this already exists?

if you select a computer group you can then select pencil next to User Consent and select the option 'Prompt for user consent' and 'Show connection toolbar' then ANY user who connects automatically sends 'Ask consent + bar' AND its the same for a per user/user group basis, select the pencil next to 'User Consent' on each of the pages

or do you want to do something different?

Somehow the opposite. To have the 'Prompt for user consent' on the 'Device Group' un-selected, but when clicking on the 'Connect' button to be used the 'Prompt for user consent' for this group.

Or just a domain setting that you can choose what you want to be the default option for the 'Connect' button (but not for the 'Connect All')

image

As it is now, if I have selected the 'Prompt for user consent' either on Device Group or Users Group, the tech cannot have the choice to use bypass it, and only admins can uncheck it.

dxdemetriou avatar Sep 18 '22 17:09 dxdemetriou

As it is now, if I have selected the 'Prompt for user consent' either on Device Group or Users Group, the tech cannot have the choice to use bypass it, and only admins can uncheck it.

ahhhhh, so default to 'ask consent + bar' when you click connect BUT the user has the ability to then right click and just connect normally without 'ask consent + bar' you mean?

si458 avatar Sep 18 '22 17:09 si458

Yes, right

dxdemetriou avatar Sep 18 '22 17:09 dxdemetriou

As it is now, if I have selected the 'Prompt for user consent' either on Device Group or Users Group, the tech cannot have the choice to use bypass it, and only admins can uncheck it.

ahhhhh, so default to 'ask consent + bar' when you click connect BUT the user has the ability to then right click and just connect normally without 'ask consent + bar' you mean?

Is it possible to have that as an option? It would be extremely helpful so Asking for Consent is default and the technician needs to right click to bypass the consent.

AlexanderPlaza avatar Oct 31 '22 22:10 AlexanderPlaza

Auto-accept after asking

https://github.com/Ylianst/MeshCentral/blob/6b8acc16753f430567023bf55668c1d33db5e36a/meshcentral-config-schema.json#L604

silversword411 avatar Nov 01 '22 02:11 silversword411

default to 'ask consent + bar' when you click connect BUT the user has the ability to then right click and just connect normally without 'ask consent'

I second this; I would like to be able to set what the default "connect" action is. In general, it is probably better to have the most powerful option (connect without consent) not be the default action. I would like to be able to configure the product this way.

sjsawatzky avatar Nov 01 '22 07:11 sjsawatzky

Auto-accept after asking

https://github.com/Ylianst/MeshCentral/blob/6b8acc16753f430567023bf55668c1d33db5e36a/meshcentral-config-schema.json#L604

It's not the same but just a workaround. For example, with this option you cannot have a group which should not have permissions for autoaccept. There are cases in which the ask-consent is better to be used as a primary option instead of telling people to right-click every time.

dxdemetriou avatar Nov 01 '22 07:11 dxdemetriou