OldSquirrelForWindows icon indicating copy to clipboard operation
OldSquirrelForWindows copied to clipboard

Use %PROGRAMDATA% instead of %LOCALAPPDATA% for deploying apps

Open shiftkey opened this issue 11 years ago • 7 comments

From @matteomigliore:

is it possible to use %ProgramData% instead %LocalAppData%, we need a shared installation for all users

I know one of the things that @xpaulbettsx wanted at the start was to have these apps sandboxed per-user. Making "shared installs" an option will probably require some research and experimentation.

TODO:

  • discuss how this fits with our initial goals of Shimmer

shiftkey avatar Aug 29 '13 23:08 shiftkey

:-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1: :-1:

No UAC dialogs, which means.... ...installs to the local user account (i.e. under %LocalAppData%)

anaisbetts avatar Aug 30 '13 07:08 anaisbetts

@xpaulbettsx I don't understand what do you mean :). Is it possible to use %ProgramData% to have no UAC and a shared install, no?

matteomigliore avatar Aug 30 '13 07:08 matteomigliore

Note he's referring to the All Users profile and not Program Files.

Can you install to that without UAC? Good question. Probably not as it would mean one user could affect another without admin privileges and that would be bad.

On Friday, August 30, 2013, Matteo Migliore wrote:

@xpaulbettsx https://github.com/xpaulbettsx I don't understand what do you mean :). Is it possible to use %ProgramData% to have no UAC and a shared install, no?

— Reply to this email directly or view it on GitHubhttps://github.com/github/Shimmer/issues/65#issuecomment-23545737 .

haacked avatar Aug 30 '13 14:08 haacked

Probably not as it would mean one user could affect another without admin privileges and that would be bad.

That's what I suspect. Any and all evidence to the contrary is welcome though...

shiftkey avatar Aug 30 '13 14:08 shiftkey

@Haacked so what do you suggest to allow an installation without UAC in a shared folder for all users?

matteomigliore avatar Aug 30 '13 14:08 matteomigliore

%ProgramData% isn't ACLed to allow standard users to create directories:

so what do you suggest to allow an installation without UAC in a shared folder for all users?

I hate to say it, but this almost certainly isn't possible - either you're writing to a location that anyone can change (so it's insecure), or you need UAC.

While I certainly would welcome a proposal (i.e. the "How" part) to allow per-machine installs, Shimmer has always been designed around per-user installs. If you really really need per-machine, this might not be the right tool for you

anaisbetts avatar Aug 30 '13 16:08 anaisbetts

Is not a big problem, is just to avoid to install the application (and update) for each Windows user. But probably is better to use %AppData% for everything, binaries and data, as Dropbox for example, thanks to your observations I know that is the right direction.

matteomigliore avatar Aug 30 '13 16:08 matteomigliore