|
| 1 | +# Consent for Isolated Win32 Apps |
| 2 | + |
| 3 | +## How file access consent is granted |
| 4 | + |
| 5 | +Consent is granted for Isolated Win32 Apps in three ways. |
| 6 | + |
| 7 | +1. Implicit-Consent: Apps are implicitly granted access to files and folders through the flows |
| 8 | +listed below. |
| 9 | + |
| 10 | + * File Dialog: Files and folders that are selected or created through Window's file dialog |
| 11 | + created from an isolated app. |
| 12 | + |
| 13 | + * File Type Assocition: Apps that register FTA in the manifest will show up under the open-with |
| 14 | + context menu and can be set as the default app. |
| 15 | + * Apps that do this through a COM extension will need the |
| 16 | + `isolatedWin32-shellExtensionContextMenu` capability. |
| 17 | + |
| 18 | + * Drag and Drop: Apps that register drag and drop handlers will have access to any files and |
| 19 | + folders dragged onto them. |
| 20 | + * There is currently no support for dragging between different Isolated Win32 Apps. |
| 21 | + |
| 22 | +2. Publisher Directory: If the application has the `isolatedWin32-accessToPublisherDirectory` |
| 23 | +capability, then the app will have full access to: |
| 24 | + |
| 25 | + * Network shares whose share name ends with the publisher ID of the app. |
| 26 | + |
| 27 | + * Directories with names ending with the publisher ID of the app located in |
| 28 | + `\Device\BootDevice\ProgramData`. |
| 29 | + |
| 30 | +3. Prompting: If the application has the `isolatedWin32-promptForAccess` capability, the first time |
| 31 | +the app attempts to access a file or directory, a prompt will be generated for the user to accept |
| 32 | +or decline. The choice will be saved until the consent is revoked |
| 33 | + |
| 34 | +## How consent is revoked |
| 35 | + |
| 36 | +Consent can currently be revoked in two ways. |
| 37 | + |
| 38 | +1. Settings: Through the settings, navigate to "Reset file permissions on isolated Win32 |
| 39 | +applications". On this page you can fully reset the consent granted to specific isolated apps. This |
| 40 | +will reset both prompted and implicit consent, but won't affect the publisher directory. |
| 41 | + |
| 42 | +2. Uninstall: During uninstall, all consent will be revoked. |
0 commit comments