SharePoint / sp-dev-docs

SharePoint & Viva Connections Developer Documentation
https://docs.microsoft.com/en-us/sharepoint/dev/
Creative Commons Attribution 4.0 International
1.23k stars 991 forks source link

Geolocation Problem on iOS. #8693

Open StfBauer opened 1 year ago

StfBauer commented 1 year ago

Technically the sample works. One thing I recognised is a design issue on iOS.

  1. Quickview renders the buttons like this: IMG_6718

  2. Testing on mobile. The first time someone clicks on the card the following screen comes up.

IMG_6721

When the user cancels this dialogue by clicking on the x mark - it does not show up again even though neither permission has been granted or denied. I just made the dialog go away.

  1. Enabling location capability is on mobile devices pretty well hidden. Here is a pretty strange experience the location capability can on get enabled via app permission again, but Viva connections do not request permissions again like I mentioned before. I needs to be enabled via the app permissions.

IMG_6722

Which is strange because the teams manifest of Viva Connections do not list request geolocation, media or anything else there. image

There must be some kind of request permission on demand API in the background, which is not available for 3rd party developer. The more concerning part of this is, that an administrator, auditor or someone else see the app and think, those permission do no harm to the organisation, which "Permission on demand" can track people of an organisation while using Viva Connections.

Theoretically this should not be possible and or should be listed in the permissions and or the manifest should list it.


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ghost commented 1 year ago

Thank you for reporting this issue. We will be triaging your incoming issue as soon as possible.