Permission Dialog

In this dialog you can edit a permission for a file, folder, registry key or value already existing in your installation package.

Domain

The domain of the user for which permissions are to be set. If left empty, no domain is considered for the OS user account. You can get the current domain by specifying the string [%USERDOMAIN].

Username

The name of the user account for which you set the permissions. This can be an user account or a group name. Make sure this string has a perfect match with the name of the user account or the group name on the target machine (this name has a localizable value - it depends on the target machine local language). "Everyone" and "Administrators" are generic groups. These names have the same meaning on every NT machine, independent of the locale settings (they are not localized).

Permissions

This is the list with all the permissions you can set for a file, folder, registry key or value from your package. These represent the names of the corresponding constants as they are defined in WINNT.H header file. Note that some of the permissions have one name, while others have two names, separated by comma. The single name permissions have the same meaning for any object to which they are applied to. The two names permissions have different meanings, depending on the type of the object they are applied to (file, folder, registry key or value).

The permissions checked here are considered allowed - you can not specify a denied permission. Make sure you set the appropriate permissions, otherwise you can even make the uninstallation of your product impossible.

OK

Saves the properties of the permission.

Cancel

Cancels the creation of a new permission type or discards the changes made to an existing permission.

Configuring the permissions

If you want to specify the standard Read permission, check the following:

• READ_CONTROL
• FILE_READ_DATA
• FILE_READ_ATTRIBUTES
• FILE_READ_EA

If you want to specify the standard Read and Execute permission, check the following:

• READ_CONTROL
• FILE_READ_DATA
• FILE_READ_ATTRIBUTES
• FILE_READ_EA
• FILE_EXECUTE GENERIC_EXECUTE

If you want to specify the standard Write permission, check the following:

• READ_CONTROL
• FILE_WRITE_DATA
• FILE_APPEND_DATA
• FILE_WRITE_ATTRIBUTES
• FILE_WRITE_EA
• GENERIC_WRITE

If you want to specify the standard Modify permission, check the following:

• READ_CONTROL
• DELETE
• FILE_READ_DATA
• FILE_READ_ATTRIBUTES
• FILE_READ_EA
• FILE_EXECUTE
• FILE_WRITE_DATA
• FILE_APPEND_DATA
• FILE_WRITE_ATTRIBUTES
• FILE_WRITE_EA
• GENERIC_EXECUTE
• GENERIC_WRITE

If you want to specify the standard Full Control permission, check the following:

• READ_CONTROL
• DELETE
• WRITE_DAC
• WRITE_OWNER
• SPECIFIC_RIGHTS_ALL
• GENERIC_EXECUTE
• GENERIC_WRITE
• GENERIC_ALL

When creating a permission for an element in your installation you should also create a second permission which applies only to the Administrators group. This permission should give the Administrators full control in order to allow them to uninstall the package.