Hi,
We've recently moved a macOS project from Xcode 3 to Xcode 9. Previously we did code signing as part of an external bash script that built our installers (we don't distribute on the Mac App Store yet). In Xcode 9 we've started using the "Automatically manage signing" feature. The issue we have is that the individual developers all have their own certificate, which they have to select in the Signing part of the Xcode project, but that changes the xcodeproj and then when they commit changes it will change other developer's Xcode signing certificate settings too.
What's the best practise for this situation? We only want one developer to be able to sign official binaries and installers. Is there a way to override this on a per-user basis? Should the "Team" setting be enough somehow? Can we use schemes to manage this (we already have one for debug builds, and another for release builds, but I admit I don't fully understand how schemes work)? Or should we go back to the original method, not use Xcode to sign, and just sign them ourselves?
Thanks,
James.
