Skip to content

feat: restrict newly registered devices to the owning project#55

Draft
msherman64 wants to merge 2 commits into
mainfrom
feat/register_restrict_default
Draft

feat: restrict newly registered devices to the owning project#55
msherman64 wants to merge 2 commits into
mainfrom
feat/register_restrict_default

Conversation

@msherman64
Copy link
Copy Markdown
Contributor

On register, set properties.authorized_projects to the current auth session's project ID. A device enrolls restricted by default; the owner can broaden access later via device set.

@msherman64 msherman64 requested a review from Mark-Powers as a code owner April 22, 2026 19:23
@msherman64 msherman64 force-pushed the feat/register_restrict_default branch from b971787 to a2b58b4 Compare April 22, 2026 20:31
@msherman64 msherman64 linked an issue Apr 22, 2026 that may be closed by this pull request
On register, set properties.authorized_projects to the current
auth session's project ID. A device enrolls restricted by default;
the owner can broaden access later via device set.
@msherman64 msherman64 force-pushed the feat/register_restrict_default branch from a2b58b4 to 5c8fc57 Compare April 22, 2026 20:52
@msherman64
Copy link
Copy Markdown
Contributor Author

@Mark-Powers FYI:
this change is because for development, and in general for many cases, users found "public-by-default" to be "surprising"

@msherman64 msherman64 marked this pull request as draft April 27, 2026 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

rfe: specify authorized projects at time of device enrollment

1 participant