|
1 |
| -# Consent for Isolated Win32 Apps |
2 |
| - |
3 |
| -## How file access consent is granted |
4 |
| - |
5 |
| -Consent is granted for Isolated Win32 Apps in three ways. |
6 |
| - |
7 |
| -1. Implicit-Consent: Apps are implicitly granted access to files and folders through the flows |
8 |
| -listed below. |
9 |
| - |
10 |
| - * File Dialog: Files and folders that are selected or created through Window's file dialog |
11 |
| - created from an isolated app. |
12 |
| - |
13 |
| - * File Type Assocition: Apps that register FTA in the manifest will show up under the open-with |
14 |
| - context menu and can be set as the default app. |
15 |
| - * Apps that do this through a COM extension will need the |
16 |
| - `isolatedWin32-shellExtensionContextMenu` capability. |
17 |
| - |
18 |
| - * Drag and Drop: Apps that register drag and drop handlers will have access to any files and |
19 |
| - folders dragged onto them. |
20 |
| - * There is currently no support for dragging between different Isolated Win32 Apps. |
21 |
| - |
22 |
| -2. Publisher Directory: If the application has the `isolatedWin32-accessToPublisherDirectory` |
23 |
| -capability, then the app will have full access to: |
24 |
| - |
25 |
| - * Network shares whose share name ends with the publisher ID of the app. |
26 |
| - |
27 |
| - * Directories with names ending with the publisher ID of the app located in |
28 |
| - `\Device\BootDevice\ProgramData`. |
29 |
| - |
30 |
| -3. Prompting: If the application has the `isolatedWin32-promptForAccess` capability, the first time |
31 |
| -the app attempts to access a file or directory, a prompt will be generated for the user to accept |
32 |
| -or decline. The choice will be saved until the consent is revoked |
33 |
| - |
34 |
| -## How consent is revoked |
35 |
| - |
36 |
| -Consent can currently be revoked in two ways. |
37 |
| - |
38 |
| -1. Settings: Through the settings, navigate to "Reset file permissions on isolated Win32 |
39 |
| -applications". On this page you can fully reset the consent granted to specific isolated apps. This |
40 |
| -will reset both prompted and implicit consent, but won't affect the publisher directory. |
41 |
| - |
42 |
| -2. Uninstall: During uninstall, all consent will be revoked. |
| 1 | +# Consent for Isolated Win32 Apps |
| 2 | + |
| 3 | +## How file access consent is granted |
| 4 | + |
| 5 | +Consent is granted for Isolated Win32 Apps in three ways. |
| 6 | + |
| 7 | +1. Implicit-Consent: Apps are implicitly granted access to files and folders through the flows |
| 8 | +listed below. |
| 9 | + |
| 10 | + * File Dialog: Files and folders that are selected or created through Window's file dialog |
| 11 | + created from an isolated app. |
| 12 | + |
| 13 | + * File Type Assocition: Apps that register FTA in the manifest will show up under the open-with |
| 14 | + context menu and can be set as the default app. |
| 15 | + * Apps that do this through a COM extension will need the |
| 16 | + `isolatedWin32-shellExtensionContextMenu` capability. |
| 17 | + |
| 18 | + * Drag and Drop: Apps that register drag and drop handlers will have access to any files and |
| 19 | + folders dragged onto them. |
| 20 | + * There is currently no support for dragging between different Isolated Win32 Apps. |
| 21 | + |
| 22 | +2. Publisher Directory: If the application has the `isolatedWin32-accessToPublisherDirectory` |
| 23 | +capability, then the app will have full access to: |
| 24 | + |
| 25 | + * Network shares whose share name ends with the publisher ID of the app. |
| 26 | + |
| 27 | + * Directories with names ending with the publisher ID of the app located in |
| 28 | + `\Device\BootDevice\ProgramData`. |
| 29 | + |
| 30 | +3. Prompting: If the application has the `isolatedWin32-promptForAccess` capability, the first time |
| 31 | +the app attempts to access a file or directory, a prompt will be generated for the user to accept |
| 32 | +or decline. The choice will be saved until the consent is revoked |
| 33 | + |
| 34 | +## How consent is revoked |
| 35 | + |
| 36 | +Consent can currently be revoked in two ways. |
| 37 | + |
| 38 | +1. Settings: Through the settings, navigate to "Reset file permissions on isolated Win32 |
| 39 | +applications". On this page you can fully reset the consent granted to specific isolated apps. This |
| 40 | +will reset both prompted and implicit consent, but won't affect the publisher directory. |
| 41 | + |
| 42 | +2. Uninstall: During uninstall, all consent will be revoked. |
0 commit comments