[WiX-users] Permission/PermissionEx(?) Append
Hello, someone please provide me an working example of appending permissions (in this case registry) Tried several things now (with WiX v3.9) and nothing worked for me, either during build Append attribute is unknown and without the attribute on target machine it overwrites existing permissions. Kind regards, Ferdi Ferdi Öztürk Accenture CAS GmbH Brüsseler Straße 3 D-67657 Kaiserslautern Services Enablement Telefon +49 631 303 3734 ferdi.oeztu...@accenture.commailto:ferdi.oeztu...@accenture.com Sitz: Kaiserslautern. Registergericht: Kaiserslautern, HRB 3804. Geschäftsführer: Henning Fromme, Marcus Huth This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. -- Is your legacy SCM system holding you back? Join Perforce May 7 to find out: #149; 3 signs your SCM is hindering your productivity #149; Requirements for releasing software faster #149; Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission/PermissionEx(?) Append
Can you show what markup you're using now? That would make it easier to troubleshoot. -- View this message in context: http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Permission-PermissionEx-Append-tp7594590p7594613.html Sent from the wix-users mailing list archive at Nabble.com. -- Is your legacy SCM system holding you back? Join Perforce May 7 to find out: #149; 3 signs your SCM is hindering your productivity #149; Requirements for releasing software faster #149; Expert tips and advice for migrating your SCM now http://p.sf.net/sfu/perforce ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission
Yeah, that documentation is pretty bad. Feel free to file a bug. I'm not even sure what it is trying to say. On Mon, Mar 4, 2013 at 6:43 AM, keith.doug...@statcan.gc.ca wrote: Following up on my own previous post, The description of Permission has this line in the documentation: GenericRead YesNoType specifying this will fail to grant read access What does that description mean? The name suggests that I can grant GenericRead and that will grant, well, Read in the sense of the security tab of the properties pane on a file, but ... fail to grant?? What does specifying mean? What permissions do I grant to allow a group or user to *just* read a static configuration file? I've determined through experimentation that (1) below is not enough, and that (2) *is* that using Permission overrides everything else and that (3) yes, you can use a group, so I suppose I don't need that information still ... Keith Douglas Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 keith.doug...@statcan.gc.ca Telephone | Téléphone 613-951-4405 Facsimile | Télécopieur 613-951-1966 Government of Canada | Gouvernement du Canada -Original Message- From: Douglas, Keith - CoSD/DSCo Sent: March-01-13 3:40 PM To: General discussion for Windows Installer XML toolset. Subject: Permission (1) If I grant Read, ReadAttributes, ReadExtendedAttributes to two users based on a Permission element, what permissions do other users have? (2) Are the permissions exhaustive for those users? If not, how do I clear write access? Do I somehow have to use an explicit deny? (3) Can the User attribute be used with a local group as the value of the parameter instead? Finally, is the section in the Wix 3.5 documentation wrong on the difference between Permission and Util:PermissionEx? Or is the otherwise excellent book by Nick Ramirez wrong? The latter seems to describe Permission when talking about Utils:PermissionEx if the built in docs are to be believed. Keith Douglas Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 keith.doug...@statcan.gc.ca Telephone | Téléphone 613-951-4405 Facsimile | Télécopieur 613-951-1966 Government of Canada | Gouvernement du Canada -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission
Following up on my own previous post, The description of Permission has this line in the documentation: GenericRead YesNoType specifying this will fail to grant read access What does that description mean? The name suggests that I can grant GenericRead and that will grant, well, Read in the sense of the security tab of the properties pane on a file, but ... fail to grant?? What does specifying mean? What permissions do I grant to allow a group or user to *just* read a static configuration file? I've determined through experimentation that (1) below is not enough, and that (2) *is* that using Permission overrides everything else and that (3) yes, you can use a group, so I suppose I don't need that information still ... Keith Douglas Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 keith.doug...@statcan.gc.ca Telephone | Téléphone 613-951-4405 Facsimile | Télécopieur 613-951-1966 Government of Canada | Gouvernement du Canada -Original Message- From: Douglas, Keith - CoSD/DSCo Sent: March-01-13 3:40 PM To: General discussion for Windows Installer XML toolset. Subject: Permission (1) If I grant Read, ReadAttributes, ReadExtendedAttributes to two users based on a Permission element, what permissions do other users have? (2) Are the permissions exhaustive for those users? If not, how do I clear write access? Do I somehow have to use an explicit deny? (3) Can the User attribute be used with a local group as the value of the parameter instead? Finally, is the section in the Wix 3.5 documentation wrong on the difference between Permission and Util:PermissionEx? Or is the otherwise excellent book by Nick Ramirez wrong? The latter seems to describe Permission when talking about Utils:PermissionEx if the built in docs are to be believed. Keith Douglas Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 keith.doug...@statcan.gc.ca Telephone | Téléphone 613-951-4405 Facsimile | Télécopieur 613-951-1966 Government of Canada | Gouvernement du Canada -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission
(1) If I grant Read, ReadAttributes, ReadExtendedAttributes to two users based on a Permission element, what permissions do other users have? (2) Are the permissions exhaustive for those users? If not, how do I clear write access? Do I somehow have to use an explicit deny? (3) Can the User attribute be used with a local group as the value of the parameter instead? Finally, is the section in the Wix 3.5 documentation wrong on the difference between Permission and Util:PermissionEx? Or is the otherwise excellent book by Nick Ramirez wrong? The latter seems to describe Permission when talking about Utils:PermissionEx if the built in docs are to be believed. Keith Douglas Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 keith.doug...@statcan.gc.ca Telephone | Téléphone 613-951-4405 Facsimile | Télécopieur 613-951-1966 Government of Canada | Gouvernement du Canada -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission element for domain user account
Hi guys, I'm having a question about Permission usage. Referring to http://wix.sourceforge.net/manual-wix2/wix_xsd_permission.htm, I have the following codes, I use a domain account(with administrator privilege) to install it, but I couldn't access the install dir due to no permission. What's wrong with my codes? PropertyRef Id='WIX_ACCOUNT_ADMINISTRATORS' / PropertyRef Id='WIX_ACCOUNT_USERS' / ... Component Id=ProductComponent ... CreateFolder Permission User='[WIX_ACCOUNT_USERS]' GenericRead='yes' GenericExecute='yes' / Permission User='[WIX_ACCOUNT_ADMINISTRATORS]' GenericAll='yes' / /CreateFolder ... The installation log shows 'WIX_ACCOUNT_ADMINISTRATORS'==BUILTIN/Administrators, 'WIX_ACCOUNT_USERS'==BUILTIN/Users Thanks! -ofox -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element for domain user account
From the wix manual: GenericRead YesNoType specifying this will fail to grant read access Im not sure if GenericAll overrides that or not. Try adding: Read=yes ReadAttributes=yes ReadExtendedAttributes=yes ReadPermission=yes -Original Message- From: Kun Shi (ofox) [mailto:s...@vmware.com] Sent: 30 January 2013 15:07 To: General discussion for Windows Installer XML toolset. Subject: [WiX-users] Permission element for domain user account Hi guys, I'm having a question about Permission usage. Referring to http://wix.sourceforge.net/manual-wix2/wix_xsd_permission.htm, I have the following codes, I use a domain account(with administrator privilege) to install it, but I couldn't access the install dir due to no permission. What's wrong with my codes? PropertyRef Id='WIX_ACCOUNT_ADMINISTRATORS' / PropertyRef Id='WIX_ACCOUNT_USERS' / ... Component Id=ProductComponent ... CreateFolder Permission User='[WIX_ACCOUNT_USERS]' GenericRead='yes' GenericExecute='yes' / Permission User='[WIX_ACCOUNT_ADMINISTRATORS]' GenericAll='yes' / /CreateFolder ... The installation log shows 'WIX_ACCOUNT_ADMINISTRATORS'==BUILTIN/Administrators, 'WIX_ACCOUNT_USERS'==BUILTIN/Users Thanks! -ofox - - Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users SDL PLC confidential, all rights reserved. If you are not the intended recipient of this mail SDL requests and requires that you delete it without acting upon or copying any of its contents, and we further request that you advise us. SDL PLC is a public limited company registered in England and Wales. Registered number: 02675207. Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, UK. -- Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_jan ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element question
It looks like all the Permission flavors don't honor the inheritance setting. I ended up writing custom actions that appended the required permissions to the existing set of permissions on the file system and registry objects. -f -Original Message- From: Blair [mailto:os...@live.com] Sent: Tuesday, October 06, 2009 2:52 PM To: 'General discussion for Windows Installer XML toolset.' Subject: Re: [WiX-users] Permission element question There are three permission-style elements in WiX. Permission which works with all supported versions of Windows Installer (and has several known limitations), PermissionEx which works with Installer 5.0, and the WixUtilsExtension PermissionEx (doesn't use SDDL, but it is more flexible than Installer's built-in action). -Original Message- From: Farooq Mahmud (Hotmail) [mailto:farooq...@hotmail.com] Sent: Tuesday, October 06, 2009 1:50 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission element question I run an msi based on the code below. [ProgramFilesFolder] gives my built-in Users group read permission but my application folder does not inherit this permission. I use Windows Explorer to create a folder under [ProgramFilesFolder] and the folder does inherit the Users permission. Is there a way through WIX to get the permission inherited? If I could move to Installer 5.0 I would use PermissionEx and set the SDDL but I need to use 4.5. Thanks. ===WIX source== = ?xml version=1.0 encoding=UTF-8? Wix xmlns=http://schemas.microsoft.com/wix/2006/wi; Product Id=29c9a1cb-f215-4e0e-996f-e088100fa30d Name=Security Language=1033 Version=1.0.0.0 Manufacturer=Security UpgradeCode=18e7265d-6f41-45b6-aa5a-57f2bd895eed Package InstallerVersion=200 Compressed=yes / Media Id=1 Cabinet=media1.cab EmbedCab=yes / Directory Id=TARGETDIR Name=SourceDir Directory Id=ProgramFilesFolder Directory Id=INSTALLLOCATION Name=Security Component Id=SetFolderPermissions Guid={40375318-CF6B-49F3-BAC1-8A6C51AC594E} CreateFolder Directory=INSTALLLOCATION Permission Domain=MyDomain User=MyAccount GenericAll=yes / /CreateFolder /Component /Directory /Directory /Directory Feature Id=ProductFeature Title=Security Level=1 ComponentRef Id=SetFolderPermissions/ /Feature /Product /Wix -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission element question
I run an msi based on the code below. [ProgramFilesFolder] gives my built-in Users group read permission but my application folder does not inherit this permission. I use Windows Explorer to create a folder under [ProgramFilesFolder] and the folder does inherit the Users permission. Is there a way through WIX to get the permission inherited? If I could move to Installer 5.0 I would use PermissionEx and set the SDDL but I need to use 4.5. Thanks. ===WIX source== = ?xml version=1.0 encoding=UTF-8? Wix xmlns=http://schemas.microsoft.com/wix/2006/wi; Product Id=29c9a1cb-f215-4e0e-996f-e088100fa30d Name=Security Language=1033 Version=1.0.0.0 Manufacturer=Security UpgradeCode=18e7265d-6f41-45b6-aa5a-57f2bd895eed Package InstallerVersion=200 Compressed=yes / Media Id=1 Cabinet=media1.cab EmbedCab=yes / Directory Id=TARGETDIR Name=SourceDir Directory Id=ProgramFilesFolder Directory Id=INSTALLLOCATION Name=Security Component Id=SetFolderPermissions Guid={40375318-CF6B-49F3-BAC1-8A6C51AC594E} CreateFolder Directory=INSTALLLOCATION Permission Domain=MyDomain User=MyAccount GenericAll=yes / /CreateFolder /Component /Directory /Directory /Directory Feature Id=ProductFeature Title=Security Level=1 ComponentRef Id=SetFolderPermissions/ /Feature /Product /Wix -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element question
There are three permission-style elements in WiX. Permission which works with all supported versions of Windows Installer (and has several known limitations), PermissionEx which works with Installer 5.0, and the WixUtilsExtension PermissionEx (doesn't use SDDL, but it is more flexible than Installer's built-in action). -Original Message- From: Farooq Mahmud (Hotmail) [mailto:farooq...@hotmail.com] Sent: Tuesday, October 06, 2009 1:50 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission element question I run an msi based on the code below. [ProgramFilesFolder] gives my built-in Users group read permission but my application folder does not inherit this permission. I use Windows Explorer to create a folder under [ProgramFilesFolder] and the folder does inherit the Users permission. Is there a way through WIX to get the permission inherited? If I could move to Installer 5.0 I would use PermissionEx and set the SDDL but I need to use 4.5. Thanks. ===WIX source== = ?xml version=1.0 encoding=UTF-8? Wix xmlns=http://schemas.microsoft.com/wix/2006/wi; Product Id=29c9a1cb-f215-4e0e-996f-e088100fa30d Name=Security Language=1033 Version=1.0.0.0 Manufacturer=Security UpgradeCode=18e7265d-6f41-45b6-aa5a-57f2bd895eed Package InstallerVersion=200 Compressed=yes / Media Id=1 Cabinet=media1.cab EmbedCab=yes / Directory Id=TARGETDIR Name=SourceDir Directory Id=ProgramFilesFolder Directory Id=INSTALLLOCATION Name=Security Component Id=SetFolderPermissions Guid={40375318-CF6B-49F3-BAC1-8A6C51AC594E} CreateFolder Directory=INSTALLLOCATION Permission Domain=MyDomain User=MyAccount GenericAll=yes / /CreateFolder /Component /Directory /Directory /Directory Feature Id=ProductFeature Title=Security Level=1 ComponentRef Id=SetFolderPermissions/ /Feature /Product /Wix -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users -- Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission/PermissionEx
PermissionEx doesn't remove the present ACLs, so this is the element you need. -- Yan -Original Message- From: Pierson Lee (PIE) [mailto:pierson@microsoft.com] Sent: Friday, August 07, 2009 2:45 AM To: General discussion for Windows Installer XML toolset.(wix-users@lists.sourceforge.net) Subject: [WiX-users] Permission/PermissionEx Is there a way to have Permission/PermissionEx (and I still haven't figured out the difference) to retain the current ACL and only modify to add/remove what I need to do on the folder specified? What I'm trying to do is create a share on an existing folder but I have to grant domain users read access on the folder level ACL also, but when I do that, it removes all the permissions on the folder currently and replaces it with only the read access from my domain account. Thanks -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission/PermissionEx
Is there a way to have Permission/PermissionEx (and I still haven't figured out the difference) to retain the current ACL and only modify to add/remove what I need to do on the folder specified? What I'm trying to do is create a share on an existing folder but I have to grant domain users read access on the folder level ACL also, but when I do that, it removes all the permissions on the folder currently and replaces it with only the read access from my domain account. Thanks -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission element seems to be ignored.
Hi, I'm trying to use the built in wix support (Permission element inside CreateFolder element) that would set the ACLs for the accounts specified. Something like below. However, when installing the component, security rights are not modified for the folder. Any thoughts on what are some prerequisites of this working, things to check? - Installer runs as admin. - Target OS is Win 2003 - ACLs are set to be inherited. Thanks! -greg Directory Id=MYROOTDIR Name=SourceDir Directory Id=MYAPPDIR Name=abc LongName=abcd Component Id=mydirpermissions Guid=8D38265E-242A-4761-B218-03811596B62C DiskId=1 CreateFolder Permission User='Administrators' GenericAll='yes' / Permission User='MYDOMAIN\MYUSER' GenericRead='yes' GenericExecute='yes' / /CreateFolder /Component !-- Files for the Application. -- Component Id=Files Guid=5C9D5F89-240C-412a-A536-2B3BD75DAF12 DiskId=1 ... /Component /Directory /Directory - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element seems to be ignored.
Administrators is a Group, not a User. Don't you want Administrator (singular)? I found this feature to be less than reliable so we set all permissions on a generic level and then have the end user set the permissions that they really need outside of the installer. Besides, it's usually some account that we had no clue about to which the end user wanted to give the permissions. No way to resolve that. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Silin Sent: Wednesday, September 17, 2008 4:39 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission element seems to be ignored. Hi, I'm trying to use the built in wix support (Permission element inside CreateFolder element) that would set the ACLs for the accounts specified. Something like below. However, when installing the component, security rights are not modified for the folder. Any thoughts on what are some prerequisites of this working, things to check? - Installer runs as admin. - Target OS is Win 2003 - ACLs are set to be inherited. Thanks! -greg Directory Id=MYROOTDIR Name=SourceDir Directory Id=MYAPPDIR Name=abc LongName=abcd Component Id=mydirpermissions Guid=8D38265E-242A-4761-B218-03811596B62C DiskId=1 CreateFolder Permission User='Administrators' GenericAll='yes' / Permission User='MYDOMAIN\MYUSER' GenericRead='yes' GenericExecute='yes' / /CreateFolder /Component !-- Files for the Application. -- Component Id=Files Guid=5C9D5F89-240C-412a-A536-2B3BD75DAF12 DiskId=1 ... /Component /Directory /Directory - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element seems to be ignored.
Greg Silin wrote: I'm trying to use the built in wix support (Permission element inside CreateFolder element) that would set the ACLs for the accounts specified. Something like below. However, when installing the component, security rights are not modified for the folder. Check a verbose log around the CreateFolders action to see what MSI reports. -- sig://boB http://joyofsetup.com/ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission vs. PermissionEx and Users Group
According to http://msdn.microsoft.com/en-us/library/aa369774.aspx, you cannot specify the Users group, only Administrators or Everyone as the username for a Permission element. My first try for this was to use the WIX_ACCOUNT_USERS property, which is set as part of the WixQueryOsWellKnownSID custom action. This works great on Windows XP and Windows Vista. The problem is that under Windows 2000, the LocalService and NetworkService accounts don't exist, so the CA fails, even though I'm not referencing those properties (they get set in the same CA). I see two solutions... Either split the CA into WixQueryOsWellKnownSID and WixQueryOsWellKnownServiceSIDs so that if you don't need those ones, they won't run on Windows 2000 and won't have a problem. OR... Looking at the source code for CaExecSecureObjects which processes the PermissionEx element, it will properly lookup the SIDs for Users group, etc. So is WiX's PermissionEx as reliable as MSI's native LockObjects t able? If so, I can just use that and not worry about the CA working or failing. Cody Cutrer - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission in ServiceInstall fails
The process to create a user, create a service, and then set the service to run as the user is fairly straitforward. I have User and ServiceInstall elements and I've verified that they're working fine by themselves; both the user and the service are created upon install. The problem comes when I try to assign the user the appropriate rights to start the service. I have the appropriate Permission element underneath ServiceInstall, but whenever I run my MSI with that element, I get the following error message in my install log: ExecSecureObjects: Error 0x80070424: failed to get security info for object: hmr_db As best as I can tell, both the user and the service are being created before this message is logged; I see these two log messages prior to the error: Action 13:53:44: CreateUser. Action 13:53:48: InstallServices. Installing new services Here's the appropriate parts of my WXS file: Component Id=postgresql_service Guid=9BDBC894-66D1-4F38-BB0B-15E564F82130 File Id=pg_ctl.exe LongName=pg_ctl.exe Name=PG_CTL.EXE Source=..\..\..\..\..\..\..\Program Files\pgsql\bin\pg_ctl.exe KeyPath=yes DiskId=1 / ServiceInstall Id=postgresql_service Description=Hybrid Medical Records Database Server DisplayName=HMR Database ErrorControl=critical Name=[SERVICE_NAME] Start=auto Type=ownProcess Vital=yes Arguments=runservice -W -N quot;[SERVICE_NAME]quot; -D quot;[postgresql_data]quot; Account=[DATABASE_USER_DOMAIN]\[DATABASE_USER_NAME] Password=[DATABASE_USER_PASSWORD] Permission User=[DATABASE_USER_NAME] Domain=[DATABASE_USER_DOMAIN] ServiceStart=yes ServiceStop=yes ServiceInterrogate=yes ServicePauseContinue=yes ServiceQueryConfig=yes ServiceQueryStatus=yes Extended=yes ServiceChangeConfig=yes ServiceEnumerateDependents=yes ServiceUserDefinedControl=yes / /ServiceInstall /Component [...snip...] Component Id=postgresql_account Guid=E67E92FE-6926-46F7-8F86-E5BD981CD84C User Id=postgresql_user Name=[DATABASE_USER_NAME] CanNotChangePassword=yes CreateUser=yes Disabled=no Domain=[DATABASE_USER_DOMAIN] FailIfExists=no Password=[DATABASE_USER_PASSWORD] PasswordExpired=no PasswordNeverExpires=yes RemoveOnUninstall=yes UpdateIfExists=yes / /Component (The two Components are in different Directorys, if that matters. I can supply the full WXS and log file if necessary. The SERVICE_NAME property is set to hmr_db; the error message does appear to be referring to the service with the correct name.) As I mentioned, the user and service are being created correctly (although the service can't start due to the missing permissions), but the minute that I add in Permission the install fails. I've Googled all over the net for any information on this problem to no avail. Can anyone help with this? It looks like a WIX/MSI bug to me; is there a workaround? Thanks, Craig - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission Element, and next v3 pre-release build?
Folks: I've just tried WIX, after a decade of suffering with Installshield, and I'm truly impressed! This is a major improvement! I'm using the latest WIX v3 pre-release build 3.0.2420.0. One of the few (blocking) bugs I've run into appears to be a known bug with handling the Permission element under registry entries. http://sourceforge.net/tracker/index.php?func=detail http://sourceforge.net/tracker/index.php?func=detailaid=1560158group_id=1 05970atid=642714 aid=1560158group_id=105970atid=642714 According to this link, it was actually fixed in January of 2007. Since the last release (3.0.2420.0) was at the end of 2006, I don't yet have this fix. I was wondering, when is the next planned 'build' of the v3 series to be made available? Is there some way I can get the pre-pre-release builds from CVS, and build the latest version myself (or is it too unstable to make that worthwhile?) Thanks, Lewis. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission Element, and next v3 pre-release build?
Weekly builds are at: http://wix.sourceforge.net/releases/ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lewis G. Pringle, Jr. Sent: Monday, April 30, 2007 10:07 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission Element, and next v3 pre-release build? Folks: I've just tried WIX, after a decade of suffering with Installshield, and I'm truly impressed! This is a major improvement! I'm using the latest WIX v3 pre-release build 3.0.2420.0. One of the few (blocking) bugs I've run into appears to be a known bug with handling the Permission element under registry entries. http://sourceforge.net/tracker/index.php?func=detailaid=1560158group_i d=105970atid=642714 According to this link, it was actually fixed in January of 2007. Since the last release (3.0.2420.0) was at the end of 2006, I don't yet have this fix. I was wondering, when is the next planned 'build' of the v3 series to be made available? Is there some way I can get the pre-pre-release builds from CVS, and build the latest version myself (or is it too unstable to make that worthwhile?) Thanks, Lewis. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element and OI and CI attributes: how do I set them?
It's been a while since I looked at this part of the code, but I don't think you actually can set these attributes currently. If you have any thoughts on how that could be solved feel free to make a suggestion... (Note that there is the [EMAIL PROTECTED] attribute that makes a WiX provided CA do the work instead of going through the LockPermissions table, so we should be able to handle this in WiX code.) The format of the well known SID's are whatever ::LookupAccountName() will swallow I think. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anthony Wieser Sent: Thursday, March 29, 2007 4:30 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission element and OI and CI attributes: how do I set them? I'm trying to set the permissions on a folder using the permissions element, and can't quite work out how it's working, because of the mapping between property names and the actual flags used. I've looked through the source, and have now puzzled out some of the topic (and tried to update the documentation in my chm file, but found the sources don't seem to be included), so I've uploaded my suggested documentation to the feature requests page. However, I still can't see how to apply the OI, and CI attributes. My old code from a previous installer was calling ConvertStringSecurityDescriptorToSecurityDescriptor with the argument buf: wsprintf(buf, D:(A;OICI;GA;;;BA)(A;OICI;0x%08x;;;BU), READ_CONTROL|FILE_GENERIC_READ|FILE_GENERIC_WRITE); I assume that the well known SID strings for user are Administrators and Users for the Permission element, but this too isn't documented anywhere, and I can't even look into the source of msiexec to find out. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
Re: [WiX-users] Permission element and setting permissions on folder...
There seem to be attributes for all of those on the Permission element. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ravikumar Gopinath Sent: Wednesday, February 28, 2007 12:57 PM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Permission element and setting permissions on folder... I want to set the following permissions on my folder: read execute, list contents, read, write, modify. How do I set these permissions? The Permission element has GenericAll which gives full control. Setting both GenericRead=yes and GenericWrite=yes gives read write permissions only, but not read execute and list folder contents. Is there any other way to set these permissions? Thanks Ravi - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission element and setting permissions on folder...
I want to set the following permissions on my folder: read execute, list contents, read, write, modify. How do I set these permissions? The Permission element has GenericAll which gives full control. Setting both GenericRead=yes and GenericWrite=yes gives read write permissions only, but not read execute and list folder contents. Is there any other way to set these permissions? ThanksRavi- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
[WiX-users] Permission element and setting permissions on folder...
I want to set the following permissions on my folder: read execute, list contents, read, write, modify. How do I set these permissions? The Permission element has GenericAll which gives full control. Setting both GenericRead=yes and GenericWrite=yes gives read write permissions only, but not read execute and list folder contents. Is there any other way to set these permissions? ThanksRavi- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV___ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users