Re: FSCopyObjectAsync: useless and crippled
Re: FSCopyObjectAsync: useless and crippled
- Subject: Re: FSCopyObjectAsync: useless and crippled
- From: Dave Rehring <email@hidden>
- Date: Fri, 13 May 2005 22:12:14 -0700
On 5/13/05 9:50 PM, email@hidden at email@hidden wrote:
>>> You want FSCopyObject to pop-up a dialog and ask the user to
>>> authenticate a copy of a file they don't have permission to read?
>>> Then switch to privileged execution mode if it needs to?
>>> Automatically?
>>
>> Yes. Why not? Isn't OS X a modern operating system? Why should
>> it be so difficult?
>
> What I suspect the original poster was trying to say, aside from the
> practical issues, is that this is a security nightmare - I don't want
> any app which happens to copy files occasionally getting root
> privileges. Even if it asks me for them; users are too compliant
> with typing their password, since they're prompted for it a dozen
> times a day.
>
> Permission issues like this are thornier than most people
> acknowledge... while I really appreciate the new ability in Panther's
> Finder to authenticate when required for a copy/move/whatever, that's
> only because I trust the Finder. For 3rd party apps, I'd much rather
> fix the permissions myself, manually, than give them dangerous
> privileges.
Actually, I think the all-or-nothing part of Apple's authentication services
is the lame part. Either I give an app carte blanche to do whatever as root
or the operation executes as the current user.
I'd much rather have an Apple supplied API that uses an Apple tool as well
as authentication services to copy the files, so Auth-Services can tell me
what is being copied/moved/whatever to and from where... Apple's Installer
could be the first app to use this.
Of course, there's still no way for the end-user to know if the dialog is
the real Authentication-Services dialog or just a tool by third-party to
capture the user's password.
Later,
--
David Rehring Psychos do not explode when light hits
VP of Research and Development them, no matter how crazy they are...
Atimi Software, Inc.
www.atimi.com And totally insane guy!
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden