Access control, no full control wanted!

[QooScho]

Hello,
in my IA 11 MSI script I do a ;
Set Read Write Permissions on File System Object "$PROGDIR$" for Everyone
After installing the folder has FULL CONTROL to everyone! Not only read / write

No some administrators told me that this is a big security issue, because no one want Full control.

Is this a bug?
How can you set permission only to "Read", "Write" and "Modify" ?

thanks a lot
regards
Hans

[FrancescoT]

Dear Hans,

could you post (using IA clipboard format) the script command you are using?

Anyway, I don't know to which directory points your variable "PROGDIR" (this depends on how you implemented it with your script), but if it points to "ProgramFiles" folder, for sure it is not a good practice to change its default security settings.
You should eventually set custom permissions on your product installation folder only.

Regards

[QooScho]

Dear Francesco,

the problem or question is not the "PROGDIR"
It could be C:\MyProg or C:\program files\MyProg

Anyhow; the question is why does InstallAware give the files or folders FULL CONTROL?
The Set Permission command shows "Read" and "Write" and not Full control, These are different things.

regards
Hans

[FrancescoT]

Dear Hans,

Let me verify it ... I will be back as soon a s possible.

Regards

[QooScho]

Dear Francesco,

I am not the first person who posts this issue.
Please take a look into the forum here. There are a lot of other persons which think that this is not a good practice.

best regards
Hans