• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Authenticate NSFileManager Operations
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authenticate NSFileManager Operations


  • Subject: Re: Authenticate NSFileManager Operations
  • From: email@hidden
  • Date: Wed, 5 May 2010 09:54:24 -0600

Thanks for the direction Ken!

-koko

On May 5, 2010, at 9:51 AM, Ken Thomases wrote:

On May 5, 2010, at 10:32 AM, email@hidden wrote:

I am using

- (BOOL)copyItemAtPath:(NSString *)srcPath toPath:(NSString *)dstPatherror:(NSError **)error

to copy a framework to /Library/Frameworks.

But first I use

- (BOOL)removeItemAtPath:(NSString *)path error:(NSError **)error


On my system all is well.

It's not so much your system as the fact that you're logged into an administrator account.


On a user system I get

	You do not have appropriate access privileges.

On the remove step.

Indeed, a normal user account won't have permissions to modify stuff in /Library



How does one invoke authentication for NSFileManager operations?

One does not. A central tenet of the Unix security model is that processes can not gain privileges, they can only reduce their privileges. So, privileged operations can only be performed by a process which started out with privileges and never gave them up.


In other words, you have to launch a separate process in a special way in order to perform privileged operations.

One technique is to use the "authopen" command, if it works for the purpose. Another technique is outlined in the BetterAuthorizationSample sample code:

http://developer.apple.com/mac/library/samplecode/BetterAuthorizationSample/Introduction/Intro.html

Cheers,
Ken



_______________________________________________

Cocoa-dev mailing list (email@hidden)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Re: Authenticate NSFileManager Operations (From: Ken Thomases <email@hidden>)

  • Prev by Date: Re: Authenticate NSFileManager Operations
  • Next by Date: Re: Authenticate NSFileManager Operations
  • Previous by thread: Re: Authenticate NSFileManager Operations
  • Next by thread: Re: Authenticate NSFileManager Operations
  • Index(es):
    • Date
    • Thread