Allow unencrypted data to be copied to the pasteboard

The BlackBerry Dynamics platform offers comprehensive data leakage prevention controls, but in certain cases you may want to allow an app to copy unencrypted data to the pasteboard so that it can be consumed by another non-BlackBerry Dynamics app.

To implement this feature, you must use BlackBerry Dynamics SDK version 8.0 or later, and you must implement a BlackBerry Dynamics application policy in UEM that allows the administrator to enable or disable the feature. See the GDNativePasteboardAccess class reference for details about the client-side implementation.

  1. Create a BlackBerry Dynamics app policy definition file for your app. For implementation details and more information about the file format and elements, see the Application Policies Definition appendix in the API Reference.
  2. Add a setting definition for the Native Pasteboard Access policy. The name of the key must be blackberry.security.EnableNativePasteboardAcess and the default value should be false.

    Example:

    <setting name="blackberry.security.EnableNativePasteboardAccess">
    <checkbox>
        <key>blackberry.security.EnableNativePasteboardAccess</key>
        <label>Enable iOS Native Pasteboard Access</label>
        <value>false</value>
    </checkbox>
</setting>
  3. Include the Native Pasteboard Access policy setting in the structural section of the file.

    Example:

    <pview>
    <pview type="tabbed" key="iOSNativePasteboard">
        <title>iOS Native Pasteboard</title>
        <desc>Permit this application to use the GDNativePasteboardAccess API. This function allows pasteboard items to be written to and read from the pasteboard in the clear while data leakage prevention is active.</desc>
        <pe ref="blackberry.security.EnableNativePasteboardAccess" />
    </pview>
</pview>
  4. Coordinate with the UEM administrator to upload the app policy for your app in UEM. See Manage settings for a BlackBerry Dynamics apps (App configuration > Upload a template).
The UEM administrator can now enable the feature.