[GRANTED]Access Control for files, and more

[bdeshi]

admin.ini can only control access to certain locations but not files.
Therefore I propose two new keys in [AccessControl].

Code: Select all

[AccessControl]
AllowedFiles=xyplorer.exe|*.xys|E:\Games\*.exe
DisallowedFiles=cmd.exe|infection.vbs|E:\Secret\confidentialSatelliteImg.tif|*.mp3

Plus notice the additional wish for wildcard support in that section.

[eil]

since i wanted an ability to control access/hide locations from view since long ago, i second this wish.

[yusef88]

+1 for global filter separate from power filters

[bdeshi]

+1 for global filter separate from power filters

are you sure this should be in this thread?

[yusef88]

yes, "DisallowedFiles" in "Admin.ini" makes it a permanent filter

[bdeshi]

how do power filters come into play here?

[yusef88]

I'll try explain my point
there is some files and folders I do not want to see while browsing so I use below visual filter as default folder view setting to hide them
the annoying thing when I apply another filter it automatically switches back to default one if folder changed

Code: Select all

"" !desktop.ini|*.db|$recycle.bin|RECYCLER|system volume information|bootmgr|boot.ini|BOOTNXT|config.sys|hiberfil.sys|IO.SYS|MSDOS.SYS|pagefile.sys|swapfile.sys|ANG0

[bdeshi]

Oh. My wish was more like blockign execution of those "DisallowedFiles"

[yusef88]

sorry I confused between your topic and old wish about blocking files in "admin.ini"
http://www.xyplorer.com/xyfc/viewtopic.php?f=3&t=12793

[bdeshi]

Oh. My wish was more like blockign execution of those "DisallowedFiles"

good time for a bump.

[SkyFrontier]

admin.ini can only control access to certain locations but not files.
Therefore I propose two new keys in [AccessControl].

Code: Select all

[AccessControl]
AllowedFiles=xyplorer.exe|*.xys|E:\Games\*.exe
DisallowedFiles=cmd.exe|infection.vbs|E:\Secret\confidentialSatelliteImg.tif|*.mp3

Plus notice the additional wish for wildcard support in that section.

+1

While "Treat dot files as hidden" (for which I also expect scripting capabilities) acts as an "apply as you stumble upon", this would allow a more general, across-session feature.

[admin]

It's about opening/running/executing those files, right?

Well, dbl-click/Enter would be fairly easy to block, but the shell context menu? OK, I can hide the "Open" command, but there might be obscure stuff in that menu like "Play" and what not... So, I would have to completely suppress the context menu for those "disallowed files".

[SkyFrontier]

While I see benefits of current behavior, to me the most effective Access Control is denying existence awareness to either files or folders.
As a CORPORATE user sees but is denied to access Win Explorer to break XY security measures*, on home usage that may be implemented with more difficulties.

Denying visibility via .ini can be more effective, therefore. What the eye don't see won't scratch the heart.

________________
* Not to mention group policies...

[admin]

Hiding the stuff would be even easier since I wrote all that's needed today. Only your case with a full path (E:\Secret\confidentialSatelliteImg.tif) is not covered at the moment.

[eil]

So, I would have to completely suppress the context menu for those "disallowed files".

i think method is quite good as a solution.! and if Hide would be modified with <path> ability that will cover all similar wishes/situations.