That is the behavior of the Windows Installer. Take a look at the WixUtilExtension PermissionEx.
On Fri, Aug 5, 2011 at 12:44 PM, James Johnston <johnst...@inn-soft.com>wrote: > Hi, > > I'm trying to create some default registry keys for a component in > HKEY_LOCAL_MACHINE that all users should have full access to. Here's what > I've got so far: > > <Component Id="MyFile.dll" Guid="*"> > <File Id="MyFile.dll" KeyPath="yes" Source="MyFile.dll" /> > <RegistryKey Action="create" Key="SOFTWARE\MyCompany" Root="HKLM"> > <RegistryKey Action="create" Key="MyFile"> > <Permission User="Everyone" GenericAll="yes" /> > <Permission User="Administrators" GenericAll="yes" /> > <RegistryKey Action="create" Key="MySubKey"> > <RegistryValue Name="MyValue" Type="integer" Value="1" /> > </RegistryKey> > </RegistryKey> > </RegistryKey> > </Component> > > The keys I would like created: > > * HKLM\SOFTWARE\MyCompany: should have default ACL that users cannot > write to (inherit from parent) > * HKLM\SOFTWARE\MyCompany\MyFile: all users should have read/write access > to this key > * HKLM\SOFTWARE\MyCompany\MyFile\MySubKey: all users should have > read/write access to this key (inherit from parent) > > Unfortunately, the last key seems to be created with an ACL that only > allows > administrators to write to the key (same ACL as for the main "SOFTWARE" > key). Intuitively I would think that the RegistryKey underneath the key > granting everyone access would also grant everyone access. But that seems > not to be the case. > > Most puzzling is that examining "MySubKey" in the registry editor shows > that > the "Include inheritable permissions from this object's parent" is checked. > And creating new keys under "MyFile" key in registry editor works just fine > when running as a user - so the permissions are inherited. Looking at the > ACL entry for "Everyone" on "MyFile" key says that the entry applies to > "this key and subkeys" so again, I'm not sure why it isn't working. > > What do I need to do to achieve my goal of having the "Everyone" entry > propagate to the subkeys created by MSI - as outlined in my list of desired > ACLs? I realize I could probably add duplicate "Permission" elements to > the > registry values being created. But that doesn't sound very ideal; it seems > like there must be a better way! > > Best regards, > > James Johnston > > > > ------------------------------------------------------------------------------ > BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA > The must-attend event for mobile developers. Connect with experts. > Get tools for creating Super Apps. See the latest technologies. > Sessions, hands-on labs, demos & much more. Register early & save! > http://p.sf.net/sfu/rim-blackberry-1 > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > -- virtually, Rob Mensching - http://RobMensching.com LLC ------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos & much more. Register early & save! http://p.sf.net/sfu/rim-blackberry-1 _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
