cryptomator / cryptomator/cryptomator

Support disabling per-user advanced configurations

Open
#3,119 0 comments 0 reactions 0 assignees View on GitHub
state:blocked
Dominant language
Java
Stars
16.1k
Forks
1.5k
Avg merge
2d 45m
Merged PRs (30d)
1

Description

### Please agree to the following

- [X] I have searched [existing issues](https://github.com/cryptomator/cryptomator/issues?q=) for duplicates
- [X] I agree to follow this project's [Code of Conduct](https://github.com/cryptomator/cryptomator/blob/develop/.github/CODE_OF_CONDUCT.md)

### Summary

Add support for disabling the advanced configuration located in the user's home folder.

### Motivation

Per-user advanced configurations may pose a security risk through specialized malware.

### Considered Alternatives

_No response_

### Anything else?

The term "per-user advanced configuration" in the context of the Cryptomator desktop application is defined [here]( https://github.com/cryptomator/cryptomator/wiki/Advanced-Settings#setting-properties) and corresponds to the term "per-user configuration of a jpackaged application" as defined by [specification for the configuration of jpackaged apps.](https://bugs.openjdk.org/browse/JDK-8287060)

This issue depends on changes to the specification for the configuration of jpackaged apps.
Currently there is no upstream issue for this change; the [latest known update](https://bugs.openjdk.org/browse/JDK-8287060?focusedCommentId=14498086&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14498086) indicates that there are no plans to add such a feature.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked Cryptomator Advanced Settings wiki entry and the JDK-8287060 specification issue to understand the per-user configuration model. Confirm whether upstream provides a supported way to disable it; the issue is done only when Cryptomator can enforce that restriction, but the payload notes no upstream plan for the required change.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
desktop, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.