7 Replies - 526 Views - Last Post: 19 July 2012 - 01:42 AM Rate Topic: -----

#1 inkey  Icon User is offline

  • New D.I.C Head

Reputation: 1
  • View blog
  • Posts: 49
  • Joined: 26-June 12

Deployment Folder Permissions

Posted 18 July 2012 - 03:22 PM

I have finished a project and i am deploying it to a number for different people within my company's network. Some of these users have different levels of access.

The question i am stuck on is it possible that i can change the folder permissions setting when setting up the project that i am working on.

Currently when i install the software for the user i am going to manually have to login and change the folder permissions for each user.

Any info on this appricated Regards Inkey

Is This A Good Question/Topic? 0
  • +

Replies To: Deployment Folder Permissions

#2 tlhIn`toq  Icon User is offline

  • Please show what you have already tried when asking a question.
  • member icon

Reputation: 5540
  • View blog
  • Posts: 11,868
  • Joined: 02-June 10

Re: Deployment Folder Permissions

Posted 18 July 2012 - 03:30 PM

Which folders are you talking about? All folders for the entire PC?

Sounds hinky... Seems there is a risk of malware or abuse here.

If you (or someone that reads this thread) doesn't have permissions to do xyz, then this would be a way for them to circumvent the security at their place of employment and grant themselves permission that the IT department and management didn't give them.
Was This Post Helpful? 1
  • +
  • -

#3 Skydiver  Icon User is offline

  • Code herder
  • member icon

Reputation: 3590
  • View blog
  • Posts: 11,166
  • Joined: 05-May 12

Re: Deployment Folder Permissions

Posted 18 July 2012 - 04:26 PM

You do you even need to change folder permissions?

All read/write data should go into the ApplicationData, or LocalApplicationData SpecialFolder.

If there is any other data the program needs to read from another folder and the user has no rights to that folder, the question comes up: should that user even be allowed to be using that program?

If it's a matter of installing into the "Program Files" tree, setup programs deal with this all the time. A UAC prompt appears confirming or asking for credentials to be able to install the program into the Program Files directory.

Sorry, inkey. Sounds very hinkey to me that you would need to change permissions.
Was This Post Helpful? 3
  • +
  • -

#4 jared.deckard  Icon User is offline

  • New D.I.C Head

Reputation: 18
  • View blog
  • Posts: 46
  • Joined: 11-July 12

Re: Deployment Folder Permissions

Posted 18 July 2012 - 04:33 PM

It is very common for application installations to write to directories that standard user's don't have write access to. When I worked in IT, a technician with administrative privileges (me) was required to install software for users.

The answer is no, but YOU don't have to do it yourself.

This post has been edited by jared.deckard: 18 July 2012 - 04:36 PM

Was This Post Helpful? 1
  • +
  • -

#5 Skydiver  Icon User is offline

  • Code herder
  • member icon

Reputation: 3590
  • View blog
  • Posts: 11,166
  • Joined: 05-May 12

Re: Deployment Folder Permissions

Posted 18 July 2012 - 04:40 PM

View Postjared.deckard, on 18 July 2012 - 04:33 PM, said:

It is very common for application installations to write to directories that standard user's don't have write access to. When I worked in IT, a technician with administrative privileges (me) was required to install software for users.

The answer is no, but YOU don't have to do it yourself.

But those were the bad applications that assumed the user was running as administrator. There are getting to be less and less of those bad programs.
Was This Post Helpful? 1
  • +
  • -

#6 jared.deckard  Icon User is offline

  • New D.I.C Head

Reputation: 18
  • View blog
  • Posts: 46
  • Joined: 11-July 12

Re: Deployment Folder Permissions

Posted 18 July 2012 - 04:44 PM

@Skydiver

It may not have anything to do with the software itself. Restricting software installation on a company network is very important.

Consider a group policy that restricts users' access to the "Program Files" folder.

This post has been edited by jared.deckard: 18 July 2012 - 04:45 PM

Was This Post Helpful? 1
  • +
  • -

#7 Skydiver  Icon User is offline

  • Code herder
  • member icon

Reputation: 3590
  • View blog
  • Posts: 11,166
  • Joined: 05-May 12

Re: Deployment Folder Permissions

Posted 18 July 2012 - 05:06 PM

Agreed. But the admin needs only to login in, install the program and log back out. (Or the UAC equivalent.)

Once the program is installed, the admin shouldn't have tweak permissions on other folders ("%WinDir%\System32" for example) so that the program can function normally, right?

Or is it par for the course? Most current Windows programs are still poorly written that they assume the user has full admin rights?
Was This Post Helpful? 1
  • +
  • -

#8 inkey  Icon User is offline

  • New D.I.C Head

Reputation: 1
  • View blog
  • Posts: 49
  • Joined: 26-June 12

Re: Deployment Folder Permissions

Posted 19 July 2012 - 01:42 AM

Cheers some useful responses there got all i needed to know thanks inkey
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1