[JIRA] (IDP-1927) Make Jetty run under its own credentials for windows installs

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *commented* on IDP-1927 ( https://shibboleth.atlassian.net/browse/IDP-1927?atlOrigin=eyJpIjoiZjE4OGE1MWNjNGRmNDU1ZTk5MmMwMGUzZDM0NDM1YTUiLCJwIjoiaiJ9 )

Re: Make Jetty run under its own credentials for windows installs ( https://shibboleth.atlassian.net/browse/IDP-1927?atlOrigin=eyJpIjoiZjE4OGE1MWNjNGRmNDU1ZTk5MmMwMGUzZDM0NDM1YTUiLCJwIjoiaiJ9 )

So, chasing up on the option (3) and after 3 days of fighting insufficient documentation and doing a lot of trial and error I have the syntax right to add Read permissions to registry keys & files - the trick being to add GenericRead (being the obvious thing despite the documentation saying of it “specifying this will fail to grant read access”) and GenericExecute (which translates to “enumerate a directory” for directories). One should *not* specify the precise permission bits because, despite being documented, they are not implemented.

Next up is to commit what I have to a dev branch and start to play around with the GUI. Then it will be back to the code to work our how to do “with specific user” as well as “without specific user” This boils down to having a property which specifies that and doubling up the code and making the components conditional. Much will depend on what the GUI looks like

( https://shibboleth.atlassian.net/browse/IDP-1927#add-comment?atlOrigin=eyJpIjoiZjE4OGE1MWNjNGRmNDU1ZTk5MmMwMGUzZDM0NDM1YTUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1927#add-comment?atlOrigin=eyJpIjoiZjE4OGE1MWNjNGRmNDU1ZTk5MmMwMGUzZDM0NDM1YTUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100208- sha1:492d0ce )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/82b7c945/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-af4ed240-f691-4a25-b0e2-0e9485847f88
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/82b7c945/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-64ac7dce-e5ea-49cb-9214-810bbec9441d
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/82b7c945/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-e6605d9e-1153-4705-93d9-14dde0277894
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/82b7c945/attachment-0005.png>