Option for managed profile not to require unlock after every device lock
This may be related to multiple work profiles, as the behavior does not feel familiar. Not currently sure.
Steps to reproduce
- Set a password specific to the managed profile.
- Lock the device (press the power button if configured to instantly lock).
- Unlock the device.
- Attempt to access a managed profile app.
Expected behavior
The app opens without an unlock prompt, unless the work profile had been explicitly turned off/locked previously. If the user wants the work profile to lock when the device is locked, this is handled by a setting and can be disabled.
Actual behavior
The user is prompted to unlock the work profile, either with their configured unlock code or with a fingerprint if set up. If the user does not want the work profile to lock when the device is locked, there is a "Power button instantly locks" setting specific to the profile if Settings is opened within it, but this setting does not change the behavior.
Next steps
-
Investigate whether this occurs with a single managed profile whose lock settings are managed normally in the Settings app on the personal side. - It does, in both CalyxOS and AOSP.
-
Determine whether this behavior should be addressed with a toggle. - Yes, I think it should be. Since it's AOSP behavior and more secure than otherwise, it shouldn't be outright overridden.
-
Implement results of previous determination, possibly by fixing the "Power button instantly locks" setting that is specific to the profile. - Sounds reasonable; let's try and go with that option.
-
Fix "Lock after screen timeout" so that it works properly for all profiles independently. -
Pressing power button should act the same as a screen timeout, if "Power button instantly locks" is disabled. -
"Lock after screen timeout: Immediately" should mirror the behavior of "Power button instantly locks".
-
-
For new profiles, verify default behavior for the "lock after screen timeout" and "power button instantly locks" settings. Goal is to inherit parent user settings unless explicitly changed. -
Add option to choose Never for the lock after screen timeout value, but only for child profiles. -
Consider adding parent-inheritance option to Settings (clear the value in settings for the profile), but this might all be better handled in Work Profile app.
Edited by t-m-w