leighmcculloch / appsandboxfileaccess Goto Github PK

My Swift version is here
https://github.com/ConfusedVorlon/SwiftySandboxFileAccess

It would be great if you could provide a link to that in your Readme for people who prefer the Swift API

thanks again for the great bit of code

Hi,I want to custom NSOpenPanel when askPermissionForURL, action such as new folder button on panel.
'openPanel setCanCreateDirectories:YES'
And I can create new folder ,then write new file on this folder.

I've been using these great classes in my app for a while. I'm finally getting around to updating my app for Mojave and Catalina, both of which introduced new security restrictions. This has broken a lot of my code in unexpected ways. There are cases where attempting to open a file through the open dialog will still fail unless FDA permission is given. This is turning my code into spaghetti.

The core of the problem is that there is no API to tell you if a file's access is blocked because of these restrictions, but can be given if the user turns on these permissions. See this thread from a year ago; I don't think anything has changed (certainly not for Mojave):

Reliable test for Full Disk Access?

Apple says not to assume a set of directories that fall under these permissions, but provides no way of testing whether FDA is on or not or which folders is applies to. I was thinking that AppSandboxFileAccess is the right place to put these tests and return an "educated guess" as to why a file cannot be read. It might even go as far as to put up a window showing the user how to turn on FDA and Files and Folders access.

Is there any interest in this?

I just noticed this in my swift fork.
If the user uses the recents dropdown in the file picker, then they can select a folder which is not the requested one.
This causes an incorrect 'true' return in the requestPermission flow

My fix is to double-check on select

https://github.com/ConfusedVorlon/SwiftySandboxFileAccess/blob/2.0.0/SwiftySandboxFileAccess/Classes/SandboxFileAccessOpenSavePanelDelegate.swift

see: func panel(_ sender: Any, validate url: URL) throws

I've been trying to use this but it looks like it only works the first time in a specific folder, and the persisting doesn't actually work — subsequent tries sandboxd just gives a deny file-write-create (or whatever) error

Looks like this was updated last 8 months ago, not sure if it still works for you or it's just me