Re: FSCopyObjectAsync: useless and crippled
Re: FSCopyObjectAsync: useless and crippled
- Subject: Re: FSCopyObjectAsync: useless and crippled
- From: Steve Gehrman <email@hidden>
- Date: Fri, 13 May 2005 22:40:09 -0700
On May 13, 2005, at 9:50 PM, email@hidden wrote:
What I suspect the original poster was trying to say, aside from
the practical issues, is that this is a security nightmare - I
don't want any app which happens to copy files occasionally getting
root privileges. Even if it asks me for them; users are too
compliant with typing their password, since they're prompted for it
a dozen times a day.
So, you would rather an app just silently fail? There's only two
choices the app does what it needs to do (never mind what), or it
fails. If it fails, your app is useless.
Permission issues like this are thornier than most people
acknowledge... while I really appreciate the new ability in
Panther's Finder to authenticate when required for a copy/move/
whatever, that's only because I trust the Finder. For 3rd party
apps, I'd much rather fix the permissions myself, manually, than
give them dangerous privileges.
This is exactly why I'm complaining. If authenticated file copying
was built into the Core APIs, then all apps that needed to copy or
move a file would be trustworthy.
Now, I've got to reinvent the wheel which opens the potential for me
making a mistake and causing security problems. This is the core of
the issue. I can write the code, no problem. I just would rather
rely on the experts at Apple. Apple has the code, they are just not
making it public. This is a bad decision and third party apps suffer
because of it.
I'm trying to build a Lexus, Apple is my parts supplier and they are
giving me Chevy parts. Yeah, Chevy works, but it's hard to build
super high quality when your parts supplier doesn't take quality
seriously.
-steve
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden