commit 2715cbba582c5b812e97b0c98ad0842e2cd4e2fe
author Adam Bookatz <bookatz@google.com> Tue Mar 18 14:22:08 2025 -0700
committer Adam Bookatz <bookatz@google.com> Tue Mar 18 14:23:34 2025 -0700
tree ebf03f91cd283991aa87acbe2c58bb349ae09a87
parent 9d8c6297f6f1abd118ae6f1b18456fd9581cfdd2

Only one managed profile allowed per device

Flag: EXEMPT trivial no-op bugfix
Test: Create a managed profile. Nothing should have changed.
Bug: 374832167
Change-Id: Ib51ce2b9ed82fbe792e38aa959f209333b74b9b3

services/core/java/com/android/server/pm/UserTypeFactory.java

diff --git a/services/core/java/com/android/server/pm/UserTypeFactory.java b/services/core/java/com/android/server/pm/UserTypeFactory.java
index 5798aa9..64359ea 100644
--- a/services/core/java/com/android/server/pm/UserTypeFactory.java
+++ b/services/core/java/com/android/server/pm/UserTypeFactory.java
@@ -179,6 +179,8 @@
                 .setName(USER_TYPE_PROFILE_MANAGED)
                 .setBaseType(FLAG_PROFILE)
                 .setDefaultUserInfoPropertyFlags(FLAG_MANAGED_PROFILE)
+                // Only allow one per device; we cannot currently handle conflicting policies.
+                .setMaxAllowed(1)
                 .setMaxAllowedPerParent(1)
                 .setProfileParentRequired(true)
                 .setLabels(
@@ -302,6 +304,7 @@
                 .setName(USER_TYPE_PROFILE_PRIVATE)
                 .setBaseType(FLAG_PROFILE)
                 .setProfileParentRequired(true)
+                .setMaxAllowed(1)
                 .setMaxAllowedPerParent(1)
                 .setEnabled(UserManager.isPrivateProfileEnabled() ? 1 : 0)
                 .setLabels(R.string.profile_label_private)