Re: Authorization in an Installer plugin
site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com -Greg On Sep 4, 2009, at 7:17 AM, Erik Larsson wrote: Hi, Any hints would be welcome... Regards, - Erik _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/greg.neagle%40disneyani... _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... Since postflight/upgrade/install scripts run with privileges (assuming the package requires RootAuthorization), couldn't you just have your plugin write the data some place world-writable (like /tmp) and then have the postflight script read that and write to the system-wide prefs file? I'm writing an Installer plugin which needs to perform a privileged operation (writing to a system-wide preference file), and I'm wondering how I can reuse the authorization already made when installing the files. I have witnessed many installer plugins that execute after the file copy stage that make changes to otherwise protected files without requiring the user to re-authenticate, but I cannot understand how they do it. Currently, I create a new Authorization reference and have the user authenticate, which means the user will have to type its password in a new authentication dialog, before calling a helper tool with AuthorizationExecuteWithPrivileges to carry out the actual operation. I would really like to avoid having the user type its credentials in two dialogs in a row (first for copying files, second for writing to the preference file). P.S. I sent the previous email from the wrong address. Blame Thunderbird. This email sent to greg.neagle@disneyanimation.com This email sent to site_archiver@lists.apple.com
participants (1)
-
Greg Neagle