Geek Answers Handbook

WiX permissions, as I can express “Change” in terms of DACL flags

I am trying to apply user rights to a folder as part of the WiX 3.0.4318.0 installer.

From the point of view of the interface of security properties in Explorer, I want to add Modify to the rights for BUILTIN \ Users. Obviously, it must be resistant to localization of the username. Therefore, based on my research to date, I want at least:

<CreateFolder Directory="XYZ" > <PermissionEx User="[WIX_ACCOUNT_USERS]" GenericRead="yes" GenericWrite="yes" Delete="Yes" /> </CreateFolder>

Questions:

  • I do this in a subdirectory - do I correctly assume that the choice between Permission and PermissionEx is Moot?

  • What “Change” does in the “Folder Permissions” dialog box in the Explorer map in terms of rights - I see many examples in which people converted it to a magic number or a large set of flags - something that other people used (the goal is to allow creation, reading, writing, adding and deleting, which is best expressed in the user interface in terms of simple rights as "Change"). I looked at basic permissions using icacls , which tells me its name is "M", but I have no way to map them to "specific rights" (in terms used by icacls /? ). Windows Help also has a mapping table . Has anyone got an answering machine that worked?

To the PermissionEx (WIX) question, there is a very similar question that would be cruel, but fair, to be referred to as a duplicate.

+4
source share
3 answers

After some additional work on this, my conclusions are:

  • In version 3.0.5419.0 PermissionEx vs util: "PermissionEx vs Permission becomes controversial, and Extended =" true "is not required, as you see around the network with previous versions. Previous versions give errors during the execution of the BUILTIN \ USERS solution.
  • The choice of the three rights that I have chosen seems to fit the requirements of my context.

I am still very interested in seeing other answers as I remain WiX-noob.

+1
source

The following combinations are what I found

"change" resolution :

 <util:PermissionEx GenericRead="yes" GenericWrite="yes" GenericExecute="yes" Delete="yes" DeleteChild="yes" User="SOMEUSER" />

read permission :

 <util:PermissionEx Read="yes" GenericRead="yes" User="SOMEUSER" />
+3
source

To get it exactly the same as you, manually setting permissions in Windows 7 and Windows XP using WiX 3.6, you will need to use this:

 <util:PermissionEx User="Users" Domain="BUILTIN" GenericWrite="yes" GenericExecute="yes" GenericRead="yes" Delete="yes" Synchronize="yes" />
+1
source

More articles:


All Articles