First of all there is a bug report already. Unfortunately LC stuff is not able 
to reproduce the problem. 
But there a some users who reported that it is not possible in LC 9.6.6 and up 
to control an other app from within a LC script using Apple script if the app 
was not already listed under Livecode  in System 
preferences/Security&Privacy/Automation. For whatever reason there was not the 
typical security pop up asking for confirmation. 

As a workaround it is possible to run the stack first with LC 9.6.3. With that 
version the dialog pops up and the user can confirm. After that the stack works 
also with 9.6.6 and up and is able to control that other app.

But what about standalones created with LC 9.6.6 and up? They will not show up 
the dialog.

To get this working, the standalones need some additional information in the 
info.plist and they need to be code signed with entitlements. At least with the 
entitlement 
        <key>com.apple.security.automation.apple-events</key>

So after you've created the macOS standalone you have to modify the info.plist 
of that standalone and then you have to codesign it with entitlements. After 
that your app created with 9.6.6 will show that security dialog.

Is that easy? No.

I've solved it this way as a workaround, so i do not have to do this manually 
after each standalone building process.


1. I created a folder 'entitlements' in the folder   'My Livecode/resources/'

2. I copied an entitlements file into that folder and named it 
'entitlements.plist'.
        My entitlements.plist file contains all entitlements as suggested by 
the following lesson. 
        
https://lessons.livecode.com/m/4071/l/1293515-entitlements-for-signed-and-notarized-apps

3. I edited the sample info.plist file in the Livecode App bundle  
Livecode...app/Contents/Tools/Runtime/Mac OS 
X/x86-64/Standalone.app/Contents/info.plist
    I added the following two lines to it
        <key>NSAppleEventsUsageDescription</key>
        <string>This app needs permission to use Apple Script</string>
  
 I placed it directly under the line
       <string>This app requires permission to access your Media 
Library</string>

4. I edited the stack script of the stack revSaveAsStandalone, better said i 
modified the handler performAdHocCodesign pAppBundle

I commented out the line 
put "codesign --deep -f -s -" && quote & pAppBundle & quote into tShell
and put the following lines after that line

if there is a file 
revEnvironmentUserResourcesPath()&"/entitlements/entitlement.plist"

then

put "codesign --deep --entitlements" && quote 
&revEnvironmentUserResourcesPath()&"/entitlements/entitlement.plist" & Quote && 
"-f -s -" && quote & pAppBundle & quote into tShell

else

put "codesign --deep -f -s -" && quote & pAppBundle & quote into tShell

end if


Now when i create a macOS standalone the standalone contains the needed 
information in the info.plist and LC does an adhoc codesigning, as it did 
before, but now with entitlements.
With this created app the security dialog pops up right away.
If i want, for whatever reason, to create an macOS without that modification, 
then i just have to rename my entitlements.plist file and LC does the normal 
adhoc code signing as it did before.

The above steps 3 and 4 have to be done for each LC edition that does have this 
'problem'. But if you are like me then you need to do this only for the most 
current version.


Hope this helps the one or other.

Matthias

_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Reply via email to