Set folder permissions with Setup Factory

[artistscope]

Well it seems that the "revoke" command is illegal, so I removed that line and just ran with...

Folder.SetPermissions(foldername, "Authenticated Users", "Grant", "Full", true);

The log reports...

icacls.exe foldername /T /grant User:F /Q

Regardles of whether I set for Modify or Full, it only sets "Special permissions" which are of no use to me. Dunno what the "/Q" at the end is.

[artistscope]

The script is sort of working... when the permissions are applied by the script to the database folder, the permissions set on the database are ok, but it's the permissions set on the folder that may be the problem... only as "Special permissions" instead of "Full".

Where it causes a problem is that when the app calls the database it creates a .ldb file. Unless I have permissions on the folder for 'Full", not running as admin causes a database read error. I can set the permissions manually and everything works ok, but I cannot set the permissions on the folder by script or commandline.

Perhaps the command is missing something.

[Epoch18]

I'm having problems with this script/addon. I follow the instructions provided and the user/group is added to the list for that folder (if not previously there), however the actual permissions are not there. If the code applies to a user/group that already exists on that folder, then no change is made at all.

Folder.SetPermissions(AppFolder, "Users", "Grant", "Full", true);

I'm using Setup Factory 8 on Windows 7 Ultimate.

Am I doing something wrong? Thanks.

[Ulrich]

What is the actual command that is executed, as written into the log file?

Ulrich

[Epoch18]

Log files states:

C:\Windows\system32\icacls.exe  "C:\TestApp1" /T /grant "Users":F /Q

But shouldn't it be...?:

C:\Windows\system32\icacls.exe "C:\TestApp1" /grant:r "Users":(OI)(CI)F

If I type that second line into a command prompt manually, it works. Is this a difference in Windows 7 or something? I really don't know.

[Ulrich]

The ":r" will cause the current access rights to be replaced with the new setting, instead of adding the new right to the current ones. You can add the "(OI)(CI)" to the parameters by editing the script, if you wish to set the inheritance rights.

Ulrich

[Epoch18]

Well, the two lines are different enough to make me believe that I've done something wrong with the first one. Also because one works and the other doesn't. Any idea why the first line (which is from the GUI that you made) isn't working?

Also, how would I manually apply a command myself? I tried this (below) but it did not work.

File.Run("ICACLS.exe", "/grant:r \"Users\":(OI)(CI)F", "C:\\Windows\\System32", SW_MINIMIZE, true);

[Ulrich]

You need to inform the full path to the program, not just it's name. You can see in the script how it should be done.

Ulrich

[Epoch18]

Got it. Thanks!