I'm not sure if I
should file a bug-report on this or add something to the WiX-tutorial, but
anyway:
<Registry
Action='' Root='HKLM' Id='InstallBASEDIR' Type='string' Name='BASEDIR'
Key='SOFTWARE\fooComp\barApp' >
<RegistryValue>C:\Program Files\fooComp</RegistryValue>
<!-- fooADMG : user-group that can administer all the foo software -->
<Permission Domain="[%USERDOMAIN]" GenericAll='yes' Extended='no' User="fooADMG" />
<!-- Administrators : Administrators -->
<Permission GenericAll='yes' Extended='no' User="Administrators" />
<!-- SYSTEM : SYSTEM -->
<Permission GenericAll='yes' Extended='no' User="SYSTEM" />
<!-- fooUSRG : A user-group with read access to all foo software -->
<Permission Domain="[%USERDOMAIN]" Read='yes' Extended='no' User="fooUSRG" />
<!-- Everyone : Any user on the system -->
<Permission Read='yes' Extended='no' User="Everyone" />
</Registry>
<RegistryValue>C:\Program Files\fooComp</RegistryValue>
<!-- fooADMG : user-group that can administer all the foo software -->
<Permission Domain="[%USERDOMAIN]" GenericAll='yes' Extended='no' User="fooADMG" />
<!-- Administrators : Administrators -->
<Permission GenericAll='yes' Extended='no' User="Administrators" />
<!-- SYSTEM : SYSTEM -->
<Permission GenericAll='yes' Extended='no' User="SYSTEM" />
<!-- fooUSRG : A user-group with read access to all foo software -->
<Permission Domain="[%USERDOMAIN]" Read='yes' Extended='no' User="fooUSRG" />
<!-- Everyone : Any user on the system -->
<Permission Read='yes' Extended='no' User="Everyone" />
</Registry>
One might believe
when reading the WiX documentation, as well as the documentation for the
LockPermissions-table that the code above would create a reg-entry that all
users can READ. But when checking the LockPermissions-table with Orca, the
value of Permission is '1' for fooUSRG and Everyone. And with the
application installed, it's easy to see that not everyone can read the
values....
:------------------------(
Looking in WinNT.h,
I soon found out that when setting read-permissions for registry-keys, the value
should be 131097. With WinNT.h and the poorly documented Permissions-entry
in the WiX-help, I managed to get the right value.
...
<Permission Domain="[%USERDOMAIN]"
Read='yes' ReadPermission='yes' EnumerateSubkeys='yes'
Notify='yes' Extended='no' User="fooUSRG" />
<!-- Everyone : Everyone -->
<Permission Read='yes' ReadPermission='yes' EnumerateSubkeys='yes' Notify='yes' Extended='no' User="Everyone" />
</Registry>
<!-- Everyone : Everyone -->
<Permission Read='yes' ReadPermission='yes' EnumerateSubkeys='yes' Notify='yes' Extended='no' User="Everyone" />
</Registry>
The lines above gives (real) read-permissions on a
registry element.
Shouldn't
<Permission Read='yes' Extended='no' User="Everyone" /> under a
<Registry>-element give read-access?
/Jonas
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
