Contents

PrivacyPreferencesPolicyControl.Services.Identity

A dictionary listing apps and the privacy policy to apply to them.

Declaration

object PrivacyPreferencesPolicyControl.Services.Identity

Properties

NameTypeDescription
AEReceiverCodeRequirementstring

The code requirement for the receiving binary. This code requirement is required for AppleEvents service; not valid for other services.

AEReceiverIdentifierstring

The identifier of the process receiving an AppleEvent sent by the Identifier process. This identifier is required for AppleEvents service; not valid for other services.

AEReceiverIdentifierTypestring

The type of AEReceiverIdentifier value, either bundleID or path. This setting is required for AppleEvents service; not valid for other services.

Allowedboolean

If true, access is granted; otherwise, the process doesn’t have access. The user isn’t prompted and can’t change this value.

Authorizationstring

The Authorization key is an optional replacement for the Allowed key, which has one of the following possible values:

  • Allow: Equivalent to a true value for the Allowed key

  • Deny: Equivalent to a false value for the Allowed key

  • AllowStandardUserToSetSystemService: Allows a standard (non-admin) user to configure the permissions for the specified app in the Privacy preferences for services that otherwise require admin authorization; only valid for the ListenEvent and ScreenCapture services

Available in macOS 11 and later.

CodeRequirement Requiredstring

Obtained via the command codesign -display -r -.

Commentstring

Not used.

Identifier Requiredstring

The bundle ID or installation path of the binary.

IdentifierType Requiredstring

The type of identifier value. Application bundles must be identified by bundle ID. Nonbundled binaries must be identified by installation path. Helper tools embedded within an application bundle automatically inherit the permissions of their enclosing app bundle.

StaticCodeboolean

If true, statically validate the code requirement. Used only if the process invalidates its dynamic code signature.