extractZipFile problem

[d.healey]

@Lindon I thought the sandbox was a way to restrict the access an app has to the system. So not having the sandbox at all would be the most restriction free setup and if perms are required the user "should" be prompted.

I only tested on Big Sur and Monterey. I think my other system has Mojave on it (or it might be Catalina) I'll check.

[Lindon]

@d-healey well I'm basically going on this info:

https://forum.juce.com/t/elevate-rights-on-osx/32868/16
https://forum.juce.com/t/fr-add-music-files-network-client-sandbox-entitlements/32866
https://github.com/juce-framework/JUCE/commit/28ce837575f60fe0e00e8d77060bbfdae7bd1db6

but I'm pretty clueless about Macos...

[Lindon]

So I tried setting the sandbox settings I needed and manually compiling n XCode, but XCode told me this warning:

TheInstaller - App isn't code signed but requires entitlements. It is not possible to add entitlements to a binary without signing it. (in target 'TheInstaller - App')

[d.healey]

@Lindon What result do you get with the test project I posted in this thread a while back? I was testing from directly in HISE as well as compiled.

[Lindon]

@d-healey - didnt actaully try it - I will go away and try...

[Lindon]

@d-healey -- Okay well if I understand what your test is and what I'm supposed to do:

1. First button select a zip
2. second button select a folder
3. press extract.....and get the contents of 1 inside 2

Then - fail sadly... test.txt never ends up in Audio/Plug-Ins/VST3

..what's worse is that it never reports an error...

[Lindon]

@Lindon said in extractZipFile problem:

So I tried setting the sandbox settings I needed and manually compiling n XCode, but XCode told me this warning:

TheInstaller - App isn't code signed but requires entitlements. It is not possible to add entitlements to a binary without signing it. (in target 'TheInstaller - App')

...and I think this is why it still fails...

[d.healey]

@Lindon said in extractZipFile problem:

@d-healey -- Okay well if I understand what your test is and what I'm supposed to do:

1. First button select a zip
2. second button select a folder
3. press extract.....and get 1 inside 2

Then - fail sadly... test.txt never ends up in Audio/Plug-Ins/VST3

Yep you understood perfectly. Did you test from within HISE or did you compile?

Now that we have a simple test I can attempt to recreate your result and we can find a solution.

BTW I intentionally labelled the checkbox I added to HISE "Admin Permissions" because I figured it may be needed for more than just Windows at some point :)

[Lindon]

@d-healey said in extractZipFile problem:

Yep you understood perfectly. Did you test from within HISE or did you compile?

Now that we have a simple test I can attempt to recreate your result and we can find a solution.

BTW I intentionally labelled the checkbox I added to HISE "Admin Permissions" because I figured it may be needed for more than just Windows at some point :)

_ I only tested from within HISE at the moment, I will try compiling now...

[d.healey]

@Lindon said in extractZipFile problem:

_ I only tested from within HISE at the moment, I will try compiling now...

Might also be worth seeing if codesigning or notarizing makes a difference.

[Lindon]

@d-healey said in extractZipFile problem:

@Lindon said in extractZipFile problem:

_ I only tested from within HISE at the moment, I will try compiling now...

Might also be worth seeing if codesigning or notarizing makes a difference.

Compiled, tried - still fails - will try codesigning and notarizing...tho I cant see how that will make any difference...

[d.healey]

@Lindon I'll fire up my old mac now and see what result I get

[d.healey]

Same issue for me on Mojave. I also notice (and I remember Christoph telling me about this) that zip files automatically extract on download...

[Lindon]

@d-healey not really worrying about download extraction...:-)

[d.healey]

@Lindon said in extractZipFile problem:

@d-healey not really worrying about download extraction...:-)

Yet :)

[d.healey]

To confirm, those sandbox settings didn't make a difference here either. I'll keep searching. I guess as a last resort we can use the user's plugin folder instead of the system one.

[Matt_SF]

@d-healey @Lindon coming back late here but FYI, I just tested David's test project, compiled it as a standalone and it works just fine. Didn't ask for anything, it extracted correctly the zip file into my Audio/Plug-Ins/VST3/TESTDIR

@Lindon said in extractZipFile problem:

So, all you MacOS experts ...how do I get my app to start with super user permissions....?

AFAIK if your app requires writing permission, the user will be prompted to allow access when needed. Like, at the beginning of this thread when I tested the extracting function, HISE asked for permission the first time, then never again afterwards.

As far as I recall a WhiteBox generated installer (or MacOS when I try and start an installer) will ask for the password to start...

This option must be checked : "Require admin password for installation". But it should be checked by default.

But maybe tweaking these options for your installer might do the trick...? (I've never used them) :

The Installer - App isn't code signed but requires entitlements. It is not possible to add entitlements to a binary without signing it.

I also get this warning but when I ignore it, I still can codesign/notarize my plugins correctly :)

[d.healey]

@Matt_SF Are you using Mojave? The problem doesn't exist on Big Sur or Monterey but is only on earlier versions.

Packages may impart the necessary permissions on our binaries (but I I don't see how it could) I'll have to test.

[Matt_SF]

@d-healey said in extractZipFile problem:

@Matt_SF Are you using Mojave? The problem doesn't exist on Big Sur or Monterey but is only on earlier versions.

Ah, indeed I'm on Monterey.

Packages may impart the necessary permissions on our binaries (but I I don't see how it could) I'll have to test.

I also thought that would be weird... About the write permission I highlighted in my last screenshot, this is what the documentation says :
"Access : The access permissions for the item after it's installed on disk."

[d.healey]

@Matt_SF I just tested and the installer makes no difference in this case.