We have several profiles in our managed package that specify access levels to different users. We continuously build new customer fields and objects and want to be able to update the profile with the most recent security settings of our profiles as opposed to having to update the profiles in customer orgs every time. I have read a few threads similar to this that say profiles are editable but not upgradable.
One way that I think may work is that when updating a managed package, we are asked which profiles should have access to the package and we can select the last option to map profiles in the package to profiles created in the org for this purpose. However, I have tried using that and it didn't update the profile settings, specifically custom object/field access.
Do you have any ideas on what we can do to achieve this? I am aware that potential changes our customer would make might be lost but we can assume that the customers will not change the profiles.