Skip to content

Commit 12dc15c

Browse files
committed
cleanUpv2
1 parent a5b2113 commit 12dc15c

File tree

1 file changed

+42
-0
lines changed

1 file changed

+42
-0
lines changed

consent.md

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
# Consent for Isolated Win32 Apps
2+
3+
## How file access consent is granted
4+
5+
Consent is granted for Isolated Win32 Apps in three ways.
6+
7+
1. Implicit-Consent: Apps are implicitly granted access to files and folders through the flows
8+
listed below.
9+
10+
* File Dialog: Files and folders that are selected or created through Window's file dialog
11+
created from an isolated app.
12+
13+
* File Type Assocition: Apps that register FTA in the manifest will show up under the open-with
14+
context menu and can be set as the default app.
15+
* Apps that do this through a COM extension will need the
16+
`isolatedWin32-shellExtensionContextMenu` capability.
17+
18+
* Drag and Drop: Apps that register drag and drop handlers will have access to any files and
19+
folders dragged onto them.
20+
* There is currently no support for dragging between different Isolated Win32 Apps.
21+
22+
2. Publisher Directory: If the application has the `isolatedWin32-accessToPublisherDirectory`
23+
capability, then the app will have full access to:
24+
25+
* Network shares whose share name ends with the publisher ID of the app.
26+
27+
* Directories with names ending with the publisher ID of the app located in
28+
`\Device\BootDevice\ProgramData`.
29+
30+
3. Prompting: If the application has the `isolatedWin32-promptForAccess` capability, the first time
31+
the app attempts to access a file or directory, a prompt will be generated for the user to accept
32+
or decline. The choice will be saved until the consent is revoked
33+
34+
## How consent is revoked
35+
36+
Consent can currently be revoked in two ways.
37+
38+
1. Settings: Through the settings, navigate to "Reset file permissions on isolated Win32
39+
applications". On this page you can fully reset the consent granted to specific isolated apps. This
40+
will reset both prompted and implicit consent, but won't affect the publisher directory.
41+
42+
2. Uninstall: During uninstall, all consent will be revoked.

0 commit comments

Comments
 (0)