Profiles features additional functions suggestion

MrStreisand

Hello, everyone! First of all wanted to thank the devs for the amount of work that is being done to actually have a well functioning phone that doesn't try to report your every move to company a or company b. This work is valued a lot by people who are focused on on trying to find something personal and that they actually own, but may be (like myself) lack the technical abilities to fiddle with the ROMs and linux versions for a specific phone.
I wanted to stress it out how much I understand the tremendous value in the fact that after less than two weeks of release of the new models have stable versions of the graphene os, and today I've seen the announcement that the devs are going to be expanding on the hardware possibilities that the 8th line up has and using those to actually deepen the security that google isn't even freaking doing with the hardware that they produce!!!! (meanwhile sticking ai to all the promo materials, which turns out doesn't do shit ONdevice).
This is legit hard to believe and i wanted to thank each and every person who is helping out in any way to bring this amazing thing to mass market.
As not the most savvy user during the initial set up of the phone I'm trying to figure out the best solution how i'd have my device set up, and i realise that the set up that we all run is gonna vary quite a lot.
I want to suggest adding a feature (please forgive the ignorance if it's not possible to some reason) - to be able to install and maintain apps from non-main profiles across all the rest of them. Similar how right now you can maintain it from the owner profile. My reasoning is - when i'm using a secondary profile - even from the lock screen it's offering me to log out of the current profile session back to main. My set up relatively simple rn and i basically need access to the owner only when i need to update and that's it.
I understand that for some threat models this is actually preferable to have that toggle, but for low threat model daily user i think it'd be preferable and bring wider adoption.

Hope I've clearly laid out my suggestion.
Again a ton of thanks for all the work, people around the world appreciate it immensely.

other8026

MrStreisand I want to suggest adding a feature (please forgive the ignorance if it's not possible to some reason) - to be able to install and maintain apps from non-main profiles across all the rest of them. Similar how right now you can maintain it from the owner profile.

There was something like this a while back, but it was removed because the implementation as it was could be abused. For example, a user installing a fake app in a profile they do have access to, then the owner inadvertently installing the same app on another profile.

People do want a feature that works this way, or something similar to it, but I gather the GrapheneOS team wants to do it in a way that doesn't compromise the security of GrapheneOS users who use profiles when regularly or temporarily sharing their phones with other people.

MrStreisand

edit:

Or may be just have a toggle in the settings that 'hides all ui clues' that you're using anything but the stock profile, such as "end sessions' button on the lock screen and the user icon on the lock screen as well.

also part of the reasoning is how easy it is to delete to non owner profile - with all the family photos and anything else of that nature.

Sorry for the long post! :)

MrStreisand

other8026
makes sense, as i was thinking about it, that's why i suggested may be toggleble setting, or stricter profile management from the owner when creating the new profiles and specify if the have the option to install apps or not, but i understand that there is much more stuff that will be used by more people than this specific sceneraio, may be it'd be possible to implement at some point though;)