Page 1 of 1
Access control, no full control wanted!
Posted: Mon Jan 14, 2013 6:29 am
by QooScho
Hello,
in my IA 11 MSI script I do a ;
Set Read Write Permissions on File System Object "$PROGDIR$" for Everyone
After installing the folder has FULL CONTROL to everyone! Not only read / write
No some administrators told me that this is a big security issue, because no one want Full control.
Is this a bug?
How can you set permission only to "Read", "Write" and "Modify" ?
thanks a lot
regards
Hans
Re: Access control, no full control wanted!
Posted: Mon Jan 14, 2013 11:35 am
by FrancescoT
Dear Hans,
could you post (using IA clipboard format) the script command you are using?
Anyway, I don't know to which directory points your variable "PROGDIR" (this depends on how you implemented it with your script), but if it points to "ProgramFiles" folder, for sure it is not a good practice to change its default security settings.
You should eventually set custom permissions on your product installation folder only.
Regards
Re: Access control, no full control wanted!
Posted: Tue Jan 15, 2013 1:19 am
by QooScho
Dear Francesco,
the problem or question is not the "PROGDIR"
It could be C:\MyProg or C:\program files\MyProg
Anyhow; the question is why does InstallAware give the files or folders FULL CONTROL?
The Set Permission command shows "Read" and "Write" and not Full control, These are different things.
regards
Hans
Re: Access control, no full control wanted!
Posted: Tue Jan 15, 2013 11:39 am
by FrancescoT
Dear Hans,
Let me verify it ... I will be back as soon a s possible.
Regards
Re: Access control, no full control wanted!
Posted: Wed Jan 16, 2013 2:14 am
by QooScho
Dear Francesco,
I am not the first person who posts this issue.
Please take a look into the forum here. There are a lot of other persons which think that this is not a good practice.
best regards
Hans