PDA

View Full Version : Set Access Control questions



NewsArchive
07-14-2007, 07:47 AM
Several questions concerning Set Access Control:

Operation -- Is there more information about these choices? For example, what
is the difference between "Grant File Access" and "Set File Access"?

I hope to use this to permit all users read/write/create/delete priveleges to
COMMON_APP_DATA\MyCompany\MyApp.

* Am I correct that this is only necessary for Vista? If so, Should I use
Set Access Control conditionally?
* What if the target is not using NTFS? Must I test for this? If so, how?
* If I have multiple apps, must I set COMMON_APP_DATA\MyCompany\MyApp1,
COMMON_APP_DATA\MyCompany\MyApp2, etc., or just COMMON_APP_DATA\MyCompany

Domains/Users -- The help illustrates this with "SYSTEM" and "Users" and says,
"User can be a valid Windows account." How can I know what to enter here in
order to provide all users access to COMMON_APP_DATA\MyCompany\MyApp? Opening
the Lock Permissions Details dialog is not much help since the User lookup
button opens a local folder selector -- how does this relate?

BTW Pressing F1 on the Lock Permissions Details dialog calls up the "#set
compiler variable" topic.

Permissions -- How can I know which options to select in order to provide
read/write/create/delete privileges?

Perhaps I could find some answers on a cryptic MS sites, but I am hopeful that
something more productive is available. Perhaps the SP help topic could be
expanded or this topic covered in a white paper?

Many thanks,
Greg Fasolt

NewsArchive
07-14-2007, 07:47 AM
Hi Greg,

"F1" problem fixed, thank you.

If the target is not NTFS, the function fails (returns an error code).

You have to consult MSDN to learn more about this Windows functionality.
SetupBuilder 6.5 provides support for more than 600 built-in functions.
Unfortunately, it's impossible to go into detail for all of them. But I'll
see if we can expand it a little bit and provide examples in the
"SetupBuilder Tips and Tricks, How-To, and Beyond" papers/FAQs.

HTH,
Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.5
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

NewsArchive
07-14-2007, 07:47 AM
By the way:

GRANT_ACCESS allows access, combining the specified access rights with any
existing access-allowed or access-denied ACEs for the trustee.

SET_ACCESS adds an access-allowed ACE that replaces any existing
access-allowed or access-denied ACEs for the trustee.

DENY_ACCESS denies the specified access rights, combining them with any
existing access-allowed or access-denied ACEs for the trustee.

REVOKE_ACCESS does not create a new ACE. It removes any existing
access-allowed or access-denied ACEs for the trustee.

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

"point. click. ship" - that's SetupBuilder 6.5
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner