[cheerful]

The backup file is owned and readable by the logon ID. Is there any way to change it to inherit from the parent folder?

Thanks!

[SteveO86]

Are you talking about the .ipd file when you backup your BlackBerry to your computer?

[JSanders]

Wirelessly posted (8310; Category 5)

Please explain your end use need. This sounds interesting.

[cheerful]

yes, .ipd

They are to be backed up by a daemon process which runs as a different user.

[SteveO86]

a deamon process, are you running a UNIX/Linux box?

The .ipd backups are just normal files one a computer there isn't anything special about them and then can be explored using programs such as ABC Amber BlackBerry converter. If you want the .ipd files more secure you may want to encrypt the files using EFS or a 3rd party encryption utility. Or depending how advanced you want to get place in a folder where only your user account has access and deny Read access to everyone else for that folder.

Please tell me if I am looking too deep into this. Or if I missing the point completely .

How are you backing up the BlackBerry via a different login ID? Maybe editing the folder permissions for that user would be the easiest way to give them access.

[cheerful]

It runs on Windows as a service

The backup folder is set up with proper permission and inherits from parent.

The problem is that DM creates the file and set its owner and permission, limiting access to only the current user. The backup process then would fail to access it.

[daphne]

So why is that a problem? Are you trying to access backup files that belong to someone else.. another user? Possibly that user has their account password protected? Is this an individual person's PC, or a company owned PC?

[cheerful]

The backup process runs as System. The file is accessible only to the user. It's a problem so that the backup process won't work. Why does DM want to change the permission instead of just inherit from the folder?

[juwaack68]

Are you the person trying to do a backup of your own BB? What OS is on the computer?

This sounds.....weird. Maybe I just don't understand.

[daphne]

I don't understand either. If you are the user, why is it a problem?

[John Clark]

Are you talking about a backup file made by another user login of the same computer? You need to explain a little better what you are attempting to do. It sounds like you are attempting to get a file that's not yours.

[daphne]

Desktop Manager is not installed as a service. When DM is started, it starts three processes.

C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe

These two run under services.exe and svchost.exe, but they are not installed as services on the PC:
C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe

Desktop Manager also can be installed under HKEY_CURRENT_USER or HKEY_LOCAL_MACHINE. That choice is given during the installation process.

If it's installed for current user, someone under a different user account is not going to be able to run it. If the user had to reinstall the Windows OS, that could create problems with ownership of files and folders.

[JSanders]

Originally Posted by JSanders

Wirelessly posted (8310; Category 5)

Please explain your end use need. This sounds interesting.

I'd still like to know the answer to my question and the other moderator's questions before I delete this thread.

[NJBlackBerry]

And do NOT post (again) the same thing.
What are you trying to do here?

[cheerful]

I realized that the word backup is ambiguous in followup posts.

DM create those backup files (.ipd) on Windows in the folder I chose. That folder is set to have a few users to access. Typically, application creates file and set it to inherit access control list (ACL) from parent (the default behavior). However, DM changes to be accessible by only the current user.

I also have a Windows backup application running as service. Its job is to copy files and folders. It now fails b/c it runs as a different user and was unable to access the file.

The question: how can I change DM to just behave like other application to leave the backup file ACL alone?

[penguin3107]

Originally Posted by cheerful

The question: how can I change DM to just behave like other application to leave the backup file ACL alone?

You can't. That would essentially defeat the security on the .ipd file.
The whole purpose of a secure backup is so that only the user has the ability to read it/restore it. If another user could access the .ipd backup file, then you could essentially open it, and restore it to a different device. That would be a bad thing, so RIM disallows it for obvious reasons.

[cheerful]

I don't think it's a good design. If user choose to store it outside Doc&Set\user, then it's his choice. At least it should allow SYSTEM to access it.

[penguin3107]

Originally Posted by cheerful

I don't think it's a good design.

Then you don't know very much about good security practices.
Whatever your opinions are... that doesn't change the fact that you can't do what you want.
It is what it is.

[cheerful]

Originally Posted by penguin3107

Then you don't know very much about good security practices.

You do? Give me a break.

[NJBlackBerry]

Enough.