Purpose
The purpose of this article is to inform Standalone SureFox users about upcoming changes related to storage permissions due to updated Google Play Store policies. This guide outlines the impact on features using local files and provides recommendations to ensure a seamless transition to the latest version of SureFox. Note: These changes only impact devices running Android 13 or higher.
Products: SureFox
Platform: Android 13 and above
Background
To enhance user privacy, Google has introduced a Scoped Storage policy that restricts apps from accessing broad device storage. Consequently, SureFox will no longer use the traditional media permission on Android 13+ devices.
If your current SureFox deployment relies on local files stored in the device’s internal storage for features like Home Screen Wallpapers, Screensavers, Web Shortcut Icons, or Category Icons, you will need to take action to maintain these visual assets after updating.
Devices running Android 12 or older will continue to function as normal with no impact on current storage permissions.
Impact
Upon upgrading to the latest version of SureFox, the app will no longer have automatic access to the directories where your local media files are stored.
- User Prompt: Users will be prompted to manually grant SureFox access to specific storage folders.
- Functionality Interruption: If a user denies permission or selects the wrong folder, features like custom wallpapers or icons will fail to load. SureFox will continue to prompt the user periodically until the correct folder access is granted.
Recommendations and Solutions
To avoid deployment disruptions, 42Gears recommends one of the following strategies:
Option 1: Disable Automatic Updates (Short-term workaround)
To prevent an unmanaged rollout, admins can block automatic updates across all devices.
- Method A: Individual Device (Manual)
- Open the Google Play Store on the device.
- Search for SureFox.
- Tap the three-dot menu in the top right and uncheck Enable auto update.
Note: We recommend testing the new version on a small set of devices before performing a manual bulk update.
- Method B: Bulk Enforcement via SureMDM (Admin Console)
If you are using SureMDM, you can enforce a policy to block updates for all apps:
- Log in to SureMDM Console.
- Navigate to Profiles > Android > Add.
- Select System Settings and click Configure.
- Go to the Applications tab and check Enable AE-specific configurations.
- Locate App Auto-updates and set it to Never.
- Save and apply this profile to your device(s).
Important Note
- This method is exclusively applicable to Android Enterprise management types. It will not work for devices enrolled via Legacy Device Admin.
- This is a global setting. While it protects SureFox from updating unexpectedly, it will also prevent other managed apps from auto-updating.
Option 2: Use Cloud-Hosted Files (Recommended)
Replace local file paths with URL links to cloud-hosted images. Since these files are fetched via the internet, no local storage permission is required.
- Upload your wallpapers and icons to a secure web server or cloud storage (e.g., AWS S3, Dropbox).
- In SureFox Settings, replace the local file path (e.g., /sdcard/wallpaper.jpg) with the direct URL (e.g., https://yourserver.com/wallpaper.jpg).
Option 3: Transitioning to Integrated SureFox (for SureMDM Users)
42Gears now offers Integrated SureFox, where the browser engine is built directly into the SureMDM Agent/SureLock module.
Important Note
Migration from Standalone SureFox to Integrated SureFox is not a seamless/no-touch process. Admins must manually reconfigure settings within the SureMDM Console to move devices to this architecture.
How to Configure Integrated SureFox:
- Access Settings via Console: Navigate to Jobs > New Job > Android > SureLock Settings.
- Go to Allowed Applications > Visible Apps > Add App > Plugin Apps and ensure the SureFox Plugin is toggled on.
- Configure Websites (Manual Step):
- Within the same SureLock Job, locate the Manage Websites section.
- You must manually re-enter your allowed URLs, Home Page, and Browser Preferences here. These do not automatically import from your old standalone SureFox jobs.
- Deploy: Apply this updated SureLock Job to your devices.
Clean up: Once the Integrated browser is verified to be working, you should uninstall the standalone SureFox app to avoid user confusion.
Option 4: Manually Grant Folder Access (Post-Upgrade)
If you choose to continue using local files, be prepared for a one-time manual configuration on each device after the upgrade:
- Launch SureFox after the update.
- When prompted, tap Grant Access.
- Navigate to and select the specific folder containing your SureFox resources.
- Once the folder is selected and permission is granted, all features (Wallpapers, Icons, etc.) will resume working as expected.
Need more help? Here’s how to get help from our experts.