[wix-devs] util:PermissionEx and support for registry inheritance

[Rob Mensching]

0. MSI 5.0 is only available Win7+. Just FYI.

1. Yes, the focus is moving to WiX v4.0. Especially once the security fixes for WiX v3.10 become less all encompassing.

2. New feature work can be done in WiX v3 but it has to be completely backwards compatible/opt-in.

3. The feature should be implemented first in WiX v4.0 then ported/cherry-picked to WiX v3.x. See #1.


-----Original Message-----
From: wix-devs [mailto:wix-devs-bounces at lists.wixtoolset.org] On Behalf Of Jeremy Hurren
Sent: Wednesday, May 11, 2016 1:32 PM
To: WiX Toolset Developer Mailing List <wix-devs at lists.wixtoolset.org>
Subject: Re: [wix-devs] util:PermissionEx and support for registry inheritance

I think you're right - it should be possible. Two things I don't love about
it are the requirement for 5.0, since I support back to Vista and would
rather not make people install a new MSI. The second is that it potentially
overwrites any ACL that might be pre-existing on the key.

But it's worth me giving another thought to how important those two things
are.

On Wed, May 11, 2016 at 2:03 PM, Phill Hogland <phill.hogland at rimage.com>
wrote:

> Those posts appear to relate to util:PermissionEx.
>
> I suspect you can achieve your goal with wix:PermissionEx and a SDDL
> string.
>
> ________________________________________
> From: wix-devs <wix-devs-bounces at lists.wixtoolset.org> on behalf of
> Jeremy Hurren <lordjeb at lordjeb.com>
> Sent: Wednesday, May 11, 2016 1:00:00 PM
> To: wix-devs at lists.wixtoolset.org
> Subject: [wix-devs] util:PermissionEx and support for registry inheritance
>
> Just ran into an issue with wix 3.x where these permissions are applied as
> "applies to subfolders" for directories, but as "applies to this key only"
> for registry keys. Sadly, this registry behavior won't work for my project,
> and I need to fix this.
>
> It appears that the following issues all refer to the same thing and have
> been around for quite some time:
> https://github.com/wixtoolset/issues/issues/2751
> https://github.com/wixtoolset/issues/issues/2580
> https://github.com/wixtoolset/issues/issues/2006
>
> So is there any reason that it shouldn't be addressed and fixed in wix3
> repository? (I have seen that the wix3 repo appears to have been limited in
> changes to security-type fixes, I assume in the hope of focusing effort
> towards the wix4 project.)
>
> --Jeremy Hurren