WiX权限，如何用DACL标志表示“修改" [英] WiX Permissions, how do I express 'Modify' in terms of DACL flags

问题描述

我正在尝试将自定义权限应用于文件夹，作为WiX 3.0.4318.0安装程序的一部分.

I'm attempting to apply custom rights to a folder as part of a WiX 3.0.4318.0 installer.

就资源管理器中的安全性"属性UI而言，我想将修改"添加到BUILTIN \ Users的权限中.显然，它需要对用户名的本地化具有弹性.因此，根据我到目前为止的研究，我至少希望:

In terms of the Security properties UI in explorer, I want to add Modify to the rights for BUILTIN\Users. Obviously it needs to be resilient against localisation of the user name. So based on my research to date, I want at least:

<CreateFolder Directory="XYZ" >
    <PermissionEx User="[WIX_ACCOUNT_USERS]" 
         GenericRead="yes" GenericWrite="yes" Delete="Yes" />
</CreateFolder>

问题:

1. 我正在子目录中执行此操作-我假设Permission和PermissionEx之间的选择是否毫无争议是正确的吗?

1. I'm doing this in a subdirectory - am I correct in assuming that the choice between Permission and PermissionEx is Moot?

资源管理器中文件夹权限"对话框中的修改"在权限方面映射到什么-我看到许多示例，其中有人将其转换为幻数或一大堆标志-其他人使用了什么(其目的是允许创建，读取，写入，追加和删除，最好在UI中以简单权限"的形式将其表示为修改").我已经使用icacls查看了基础权限，该权限告诉我它称为"M"，但是我无法将它们映射到特定权限"(按icacls /?的用法).还有另一个映射表

What does 'Modify' in the Folder Permissions dialog in Explorer map to in terms of rights - I see many samples where people have translated it to a magic number or a big set of flags - what have other people used (the intent is to allow create, read, write, append and delete, which is best expressed in the UI in terms of Simple Rights as 'Modify'). I've looked at the underlying permissions with icacls which tells me its called 'M', but I have no way to map them to 'specific rights' (in terms as used by icacls /?). There's another mapping table in the windows help. Has anyone got an authorative answer that's worked?

在有关PermissionEx(WIX)的问题中，有一个非常相似的未解决问题，会很残忍，但可以作为重复引用.

There is a very similar unanswered question at Question regarding PermissionEx (WIX), which it would be cruel but fair to cite as a duplicate.

推荐答案

在对此进行了更多工作之后，我的发现是:

After some more work on this, my findings are:

1. 在3.0.5419.0中，PermissionEx与util:"PermissionEx与Permission"变得毫无意义，并且不需要像以前在网上看到的Extended ="true".以前的版本在运行时解析BUILTIN \ USERS时会出错. /li>
2. 选择我选择的三项权利似乎可以满足我的环境要求

1. In 3.0.5419.0, PermissionEx vs util:"PermissionEx vs Permission gets moot, and no Extended="true" like you see around the net with previous versions is required. Previous versions give errors at runtime resolving BUILTIN\USERS.
2. Selecting the three rights I picked seems to achieve the requirements of my context

我仍然很想看到其他回应，因为我仍然是WiX-noob.

I'm still very interested in seeing other responses, as I remain a WiX-noob.

这篇关于WiX权限，如何用DACL标志表示“修改"的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！