Authorization problem / Multi User Windows

If you are experiencing problems with "Everything", post here for assistance.
Post Reply
isyncer
Posts: 2
Joined: Thu Aug 06, 2020 12:36 pm

Authorization problem / Multi User Windows

Post by isyncer »

Hey void support,

is there a way/option to hide search results from other users or folder/files without access rights?
I tried a standard installation on a windows client with multiple user accounts C:\Users\user1, C:\Users\user2, ... and the index for user1 also shows results of user2. For example C:\Users\user2\AppData\Local\Packages...
It's a security issue :|
User1 should not see any folders and files of user2. Also no files without access rights.

I tried to find a similar topic in forum without success.

Are you planning such a security-friendly installation version (for example the enterprise version also with excluded hidden folders/files, system folders/files, folders/files from other users, folders/files without access rights)?

Thank you for your hints and feedback.
horst.epp
Posts: 1447
Joined: Fri Apr 04, 2014 3:24 pm

Re: Authorization problem / Multi User Windows

Post by horst.epp »

isyncer wrote: Thu Aug 06, 2020 12:58 pm Hey void support,

is there a way/option to hide search results from other users or folder/files without access rights?
I tried a standard installation on a windows client with multiple user accounts C:\Users\user1, C:\Users\user2, ... and the index for user1 also shows results of user2. For example C:\Users\user2\AppData\Local\Packages...
It's a security issue :|
User1 should not see any folders and files of user2. Also no files without access rights.

I tried to find a similar topic in forum without success.

Are you planning such a security-friendly installation version (for example the enterprise version also with excluded hidden folders/files, system folders/files, folders/files from other users, folders/files without access rights)?

Thank you for your hints and feedback.
Thats not a security issue at all.
Because a correct Everything installation and usage gives a normal user no more rights than the OS provides !
Install the service and don't run Everything as Adminstrator.
If you want even more configure folder indexing and remove NTFS volumes.
NotNull
Posts: 5461
Joined: Wed May 24, 2017 9:22 pm

Re: Authorization problem / Multi User Windows

Post by NotNull »

Everything gets it's blazing speed from the way it has access to Windows' low level "address book" of all files (and that bypasses access rights as those are on a lower level).
Therefore all filenames will be listed.

However ... if you want to access these files, that is done in the regular Windows way, meaning that acces rights are honored.
So you can see the filenames of user2, but you can't view/open/edit/delete/etc. them.


When you use folder indexing (Menu:Tools > Options > Indexes > Folders) instead of NTFS indexing, uses the "Windows way" and will not show the files it does not have access to.
isyncer
Posts: 2
Joined: Thu Aug 06, 2020 12:36 pm

Re: Authorization problem / Multi User Windows

Post by isyncer »

NotNull wrote: Thu Aug 06, 2020 10:06 pm Everything gets it's blazing speed from the way it has access to Windows' low level "address book" of all files (and that bypasses access rights as those are on a lower level).
Therefore all filenames will be listed.

However ... if you want to access these files, that is done in the regular Windows way, meaning that acces rights are honored.
So you can see the filenames of user2, but you can't view/open/edit/delete/etc. them.

When you use folder indexing (Menu:Tools > Options > Indexes > Folders) instead of NTFS indexing, uses the "Windows way" and will not show the files it does not have access to.
Ok, I understand, but the index option by folders makes it difficult to create a software installation package for companies.

An installation should only display folders and files for the logged in user.
User1 logged in: Everything should show C:\Users\user1\...
User2 logged in: Everything should show C:\Users\user2\...
User3 logged in: Everything should show C:\Users\user3\...

It's impossible to setup such a config before installation.
In my opinion it's a missing option. An option to ignore other users' folders and files on the same system. :|
For 'normal' users it should also be impossible to change any settings of the installation.

I think companies needs a installation package with a fixed configuration.
Indexing of specific folders (for example C:\temp) and only for the current logged in user (C:\Users\user1 for user1; C:\Users\user2 for user2, ...). And 'normal' users can't change these settings.
That would be great.

Is there a way to freeze Everything.ini settings for users?
Post Reply