Re: Security Bug!!!

Hello Benjamin,

Happy New Year,

And thanks for your answer... It was really strange for me to find workable
solution so thanks with explanation!

Right now I have no problems with WinFS, also I made it as the default place
for my Documents Folder,
so it's cool to use my data in my applications. The only problem is that I
can't get an access to this data while running Windows Vista... And I wonder
what I have to do with this data if WinFS crashes?

What about Backup/Restore mechanism? Some articles explaing it would be
great!

Thanks,

Daniel A. Kornev,
Microsoft Student Partner.

"Benjamin Grol [MSFT]" <BenjaminGrolMSFT@discussions.microsoft.com> wrote in
message news:AB0E1771-CF21-4F22-B763-26B4DB77A2CC@microsoft.com...
> Hi Daniel,
>
> Sorry for the delay, I think this post slipped through the cracks...
>
> With WinFS Beta1 there is no way to change permissions on the root share
> (e.g. the "DefaultStore" share) through the UI of the WinFS Shell
> Namespace
> Extension (The SNE is what you see when you double-click "WinFS Stores" in
> My
> Computer.) We chose not to expose this in Beta1. Changing permissions on
> the root share can cause undesired side-effects for end-users (like being
> unable to access *any* data in WinFS, etc.)
>
> From the scenario you describe, I suspect that the ACL on the DefaultStore
> share of the remote instance of WinFS is causing the Access Denied
> message.
>
> I recommend creating a share under DefaultStore and setting the Share and
> Security ACLs properly on it (that is, with the non-admins credentials as
> you
> mentioned below.) This should enable the non-admin user to access the
> remote
> instance of WinFS.
>
> We have flagged this issue as something important to iron out for WinFS
> Beta2 and your feedback on this is very much appreciated.
>
> Thank you,
> Benjamin Grol [MSFT]
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
> "Daniel A. Kornev [MSP]" wrote:
>
>> Hello,
>>
>> I've installed WinFS onto one test PC with Win XP Pro SP 2 joined into my
>> home domain. Of course, I'm admin at home on all PCs. Today I tried the
>> following scenario: I'm logged onto my another PC by using domain account
>> which doesn't have Admin rights on domain. I added this accout to the
>> DefaultStore on the test PC with WinFS to get an access under this
>> account
>> to this WinFS store. But how I was surprised when I saw that "access is
>> denied"! Ok, I added my account to local Admins group on the test WinFS
>> PC
>> but no good news - the same problem.
>> So now I added my account to Admins on domain and now I have full access
>> to
>> this shared store.
>>
>> Of course, it's not right that the standart security model doesn't work!
>>
>> Warm Regards,
>> Daniel A. Kornev [MSP]
>>
>>
>>