diff --git a/libs/common/src/admin-console/services/policy/default-policy.service.spec.ts b/libs/common/src/admin-console/services/policy/default-policy.service.spec.ts index 9db61ec5c95..6b50f9befec 100644 --- a/libs/common/src/admin-console/services/policy/default-policy.service.spec.ts +++ b/libs/common/src/admin-console/services/policy/default-policy.service.spec.ts @@ -490,6 +490,26 @@ describe("PolicyService", () => { expect(result).toBe(true); }); + test.each([ + PolicyType.PasswordGenerator, + PolicyType.FreeFamiliesSponsorshipPolicy, + PolicyType.RestrictedItemTypes, + PolicyType.RemoveUnlockWithPin, + ])("returns true and owners are not exempt from policy %s", async (policyType) => { + singleUserState.nextState( + arrayToRecord([ + policyData("policy1", "org2", PolicyType.PasswordGenerator, true), + policyData("policy2", "org2", PolicyType.FreeFamiliesSponsorshipPolicy, true), + policyData("policy3", "org2", PolicyType.RestrictedItemTypes, true), + policyData("policy4", "org2", PolicyType.RemoveUnlockWithPin, true), + ]), + ); + + const result = await firstValueFrom(policyService.policyAppliesToUser$(policyType, userId)); + + expect(result).toBe(true); + }); + it("returns false when policyType is disabled", async () => { singleUserState.nextState( arrayToRecord([ diff --git a/libs/common/src/admin-console/services/policy/default-policy.service.ts b/libs/common/src/admin-console/services/policy/default-policy.service.ts index 667dd9082a4..798adf520f2 100644 --- a/libs/common/src/admin-console/services/policy/default-policy.service.ts +++ b/libs/common/src/admin-console/services/policy/default-policy.service.ts @@ -281,6 +281,9 @@ export class DefaultPolicyService implements PolicyService { case PolicyType.RestrictedItemTypes: // restricted item types policy return false; + case PolicyType.RemoveUnlockWithPin: + // Remove Unlock with PIN policy + return false; case PolicyType.OrganizationDataOwnership: // organization data ownership policy applies to everyone except admins and owners return organization.isAdmin;