locked
Where are an apps file permissions stored?

    Question

  • I have a LOB app that needs to access an internal network update servers Windows Share. However for that to work, the user has to first give permission via the file picker to that folder. That is inconvenient in a LOB scenario. Therefore I would like to know if there is a way to mark certain folders accessible for an app via Group Policy or Regsistry key? Where are the apps permissions saved (and is the format open?) and could these permissions be modified by a plain old Win32 desktop app (running on an admin account).


    Wednesday, March 18, 2015 8:11 PM

Answers

  • Hi Phil,

    The Publishing Windows Store apps forum is for help with publishing your app to the Windows Store.

    For help with enterprise configuration and deployment please post in the Windows 8.1 IT Pro forums on TechNet. For help with desktop development questions please post in the Windows Desktop Development forums.

    Windows Store apps use the standard Windows security system with permissions are controlled by ACLs on the file objects. Breaking the app out of its app container by granting it access to new locations is not recommended or supported and may reduce the security of the system.

    The right way for an enterprise app to break out of the app container is to write a Brokered Windows Runtime Components for side-loaded Windows Store apps . This will allow the Windows Runtime app to call a component outside of its app container which can then call desktop API on the Runtime app's behalf.

    Your app could hand the data files to the brokered Windows Runtime Component which could then drop it on the share. This wouldn't require either user interaction or reducing the security on the share.

    Thursday, March 19, 2015 12:16 AM
    Owner