Re: Sandbox Clarification
Re: Sandbox Clarification
- Subject: Re: Sandbox Clarification
- From: Mike Abdullah <email@hidden>
- Date: Thu, 31 Jan 2013 00:31:00 +0000
On 30 Jan 2013, at 21:59, Sean McBride <email@hidden> wrote:
> On Wed, 30 Jan 2013 14:51:41 -0700, koko said:
>
>> I have apps that need to browse the local file system and are therefore
>> not Mac App store / Sandboxable.
>>
>> However, if I understand correctly, any file or folder that the user
>> gives to the app via the open panel can be be used in a sand boxed
>> environment … do I have this correct?
>>
>> So, if I ask the user for files via the open panel, rather than just
>> browsing for them, my app can use them ?
>
> App Sandbox is configurable. You can configure it to:
> - allow no file access at all
> - allow only files chosen from NSOpen/SavePanel (com.apple.security.files.user-selected.read-write)
> - allow specific paths (com.apple.security.temporary-exception.files.absolute-path.read-write)
> - allow full access (com.apple.security.temporary-exception.files.absolute-path.read-write with the path "/")
>
> There are also readonly and readwrite varieties.
And then on top of that, for any item to which you have write access, you can save a security-scoped bookmark to persist access. (Bookmarks are, in turn, their own entitlements too)
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden