Our enterprise product uses a content filter, normally customers deploy MDM profiles to authorise and allow the content filter to work. Some customers however do not use these profiles, requiring them to enable the system extension in System Settings and allow the content filter via the popup below.
If the user selects "Don't Allow", intentionally or by mistake, there does not appear to be an mechanism for them to change their mind and allow it instead.
If the user fails to enable the system extension on the first prompt, there is an option to enable if via System Settings. There doesn't seem to be a similar option if they "Don't Allow" the content filter.
How can the user allow a previously denied content filter?
That alert is triggered by your attempt to save a configuration. When the user clicks Don’t Allow, the save operation fails with an NEFilterManagerError.configurationPermissionDenied error. You can give the user another chance by attempting the save operation again. That is, call saveToPreferences() again.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"