Re: NSSavePanel: Another sandbox issue
Re: NSSavePanel: Another sandbox issue
- Subject: Re: NSSavePanel: Another sandbox issue
- From: Alex Zavatone <email@hidden>
- Date: Thu, 31 May 2012 20:18:26 -0400
On May 31, 2012, at 5:46 PM, Kyle Sluder wrote:
>
> On May 31, 2012, at 2:43 PM, Alex Zavatone wrote:
>
>>
>> So, before I start waving my hands in the air, running around the office and panicking, does this mean that the user can not save files where ever he/she wants to on the HD in future versions of the Mac OS?
>
> No, it's completely and totally incorrect. It's obvious Marco either didn't read or didn't understand the Sandboxing Guide.
>
> --Kyle Sluder
OK Kyle, I've watched the WWDC 2011 Session 203 - "Introducing the App Sandbox" video and read:
http://developer.apple.com/library/ios/#DOCUMENTATION/Miscellaneous/Reference/EntitlementKeyReference/EnablingAppSandbox/EnablingAppSandbox.html
Table 3-2 in the above link states that your app can be configured to save to files and folders the user opens.
It also states that programmatic access (Table 3-3) can be enabled for Downloads, Music, Movies and Pictures. (Why not Documents?)
So, it looks like you can set up an app to save into known places and also to let the user select where he/she opens/saves files in the file system. (Table 3-2 again).
Now, I've got no experience with this. I'm just trying to interpret the docs, so as I typed, it looks like this will be possible and not be a VIsta style permissions nightmare.
I'm assuming you can still save app prefs in the ~/Library/Preferences/ folder, but your app can't save elsewhere, like to root, without a user directed action.
From 31:36 in the WWDV Session 203 video:
HOME = ~/Library/Containers/App/
CFFIXED_USER_HOME = ~/Library/Containers/App/
NSHomeDirectory() will return HOME (as defined above) and if you try to open("/Users/krsric/Library/foo") an action like this will be denied.
I'm assuming that from the user's experience, the implications will (hopefully) be minimal.
I wonder what would happen if the user quits the sandbox deamon, or if we, as users, will still have access to apps like Application Monitor, or have shell access in sandboxed applications.
Admittedly, I don't have close to a grip around all of the potential implications sandboxing imposes, and what it may not affect.
I do really recommend checking out the Entitlements reference and watching the video from 31:36 on. Log in to developer.apple.com and get that video.
Cheers,
- Alex
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden