Re: Fun with AuthorizationExecuteWithPrivileges...
Re: Fun with AuthorizationExecuteWithPrivileges...
- Subject: Re: Fun with AuthorizationExecuteWithPrivileges...
- From: j o a r <email@hidden>
- Date: Tue, 14 Aug 2001 23:07:22 +0200
On Tuesday, August 14, 2001, at 10:45 , Lloyd Sargent wrote:
Okay, well this gets into another question - at what level does the DO
method execute? At the level of the caller (who is not running
"authorized") or the tool (which is running as "authorized")?
I would ASSUME it would be at the tool level and hence the method
executing is also authorized... But I may be ASSUMING too much here...
Since it works - ie. in my case I can move files that I don't own - I
_know_ that they are executed by the tool and authorized. Not
surprising, since I'm telling the tool to do something, but it is the
tool that calls the methods that modifies stuff outside of the reach of
my user authorization.
What is a bit more surprising perhaps, and something that I wasn't sure
would work before I tried it, was that it is possible to do DO between
tasks of different authorization level like this. It probably makes
sense for those who knows the theory behind this, in my untrained mind I
imagined that the tool might had answered something like "you cannot
tell me what to do since you don't have the same authorative rights".
But it works, and I'm happy. I'd be even more happy if some one would
pick up on my question about NSInvocations placed earlier today... Hint,
hint... ;)
Regards,
j o a r