DMG Canvas Issue
-
For those of us who jumped on this bandwagon, be aware of this potential issue with DMG Canvas (detailed by one of Apple's techs):
https://forums.developer.apple.com/forums/thread/712148
There's also no mention of this as a potential issue on the app's website.
To add some context, when you test it on your computer, it works fine. It's code-signed and passed DMG Canvas' notarisation. But if you upload to your server, and download it to a different account — then you'll see if you're having this problem.
So, just a heads-up. If I figure out a work-around, I'll post more.
I spoke with Seth at Araelium, and appreciate his candour. His explanation is backed up by Apple's explanation. Seth provided a work-around that, at least for my needs, is fine. His response is below, for the complete information.
Honestly I never knew why that failed for some people, so it's great to see the answer. Hmm. Still though, there's nothing DMG Canvas can do about that. When a zip or dmg etc is downloaded, it's marked as quarantined, and apparently even moving it out of Downloads and to another location isn't removing that quarantine flag like I expect it should.
Unfortunately this is just a bad experience entirely controlled by macOS.
I guess the best solution is to explicitly tell the user in the dmg to double click to open that Components folder, and then drag it into the new window. (Versus telling them to drag and drop into the folder.)
-
@clevername27 Oh good catch, I think I'll be sticking with packages for the foreseeable future.
