[Important bug] Extension settings: Existing extensions not removed/blocked if category is not allowed

[htcfreek]

JSON code for policy 'Extension settings":

{
    "*": {
        "installation_mode": "allowed",
        "blocked_install_message": "message",
        "allowed_types": ["theme","dictionary","locale"]
    }
}

✔ What I expect

I expect that I can't install new extensions and all existing ones are removed or disabled.

(And of course explicit allowed extensions should remain installed and in user's enabled state.)

❌ What happens

I can't install new extensions and all existing ones are remaining enabled and installed

Version

Firefox ESR 140.4.0

[mkaply]

That's because you didn't list extensions in the list so by default extensions aren't allowed.

[mkaply]

sorry, I misunderstood. you're saying existing extensions should be removed. that's fair. I have it on my list of things to do to figure out how to handle this list better because it's very poorly documented on the Chrome side

[mkaply]

sorry, I misunderstood. you're saying existing extensions should be removed. that's fair. I have it on my list of things to do to figure out how to handle this list better because it's very poorly documented on the Chrome side

[htcfreek]

As i tested with both synchron I can say that on edge/chrome the allowed types list has priority above all. If a type is not listed, there is no way (manual , policy allowed, policy forced) to install it and affected objects are disabled if they alread exist. Of course install of new ones is blocked too.

[mkaply]

Do you mind opening this in bugzilla?

https://bugzilla.mozilla.org/enter_bug.cgi?product=Firefox&component=Enterprise+Policies

It will be fixed in Firefox.