Aug 5

Setapp build prompts "access data from other apps" on every launch — App Group IDs missing Team ID prefix

Hi Eduard,The Setapp build of NotePlan triggers the macOS TCC dialog "NotePlan would like to access data from other apps" on every launch. Neither Allow nor Don't Allow persists — it reappears every time.Setup: macOS [version], NotePlan [version], installed via Setapp (container: co.noteplan.NotePlan-setapp).The cause looks like the App Group identifiers. From the bundle: $ codesign -d --entitlements - /Applications/Setapp/NotePlan.app com.apple.security.application-groups: group.co.noteplan.noteplan group.co.noteplan.sharedSince macOS 15, for apps not distributed through the Mac App Store or TestFlight, an App Group identifier that does not begin with the developer Team ID causes every containerURL(forSecurityApplicationGroupIdentifier:) call to hit kTCCServiceSystemPolicyAppData and prompt the user. Apple DTS confirmed this on the developer forums (threads 764539 and 758375): on macOS the group ID has to start with the Team ID, whereas on iOS it starts with "group.".For contrast, other Group Containers on the same machine use the Team ID form and never prompt: GEK3Z2S4G8.qreader.marginnote PZYM8XX95Q.com.automattic.SimplenoteMac group.co.noteplan.noteplan <- no prefixThis also matches the fact that the App Store build doesn't show the dialog — it's specifically the non-MAS distribution path that's affected.I understand changing the group identifier moves the container path and would need a migration for existing users, so this isn't a one-line fix. Flagging it anyway, since Setapp users currently get the dialog on every single launch.Thanks for the app — otherwise it's been great.

Completed