PreviousNextTracker indexSee it online !

(134/212) 357 - Privilege escalation for editing files

When opening a file that is not writable by the current user, jEdit should check whether the user wants to open the file read-only or as superuser / another user. Here's an imagined workflow:
1. According to the principle of least privilege, start by notifying the user that the file cannot be modified with the current privileges. Ask if the user wants to open read-only or read-write (and maybe a check box to use the same option for all other files opened at the same time).
2. If the user selected read-write, display the users/groups which have write access and user/password boxes. If the user is also a member of sudoers, there could be a check box to use sudo which would gray out the user box and focus the password.

Submitted engmark - 2010-05-04 09:18:51 Assigned
Priority 5 Labels
Status open Group None
Resolution None

Comments

2010-05-04 09:45:02
kpouer

Hi, I'm not sure it is possible to do that with java.
What would happens on Windows ?
Do any software do that ?

2010-05-04 11:21:52
engmark

It would have to be adopted to the individual platforms, but certainly it should be possible in Java. There should be cross-platform libraries at least to get the privileges assigned to a file. Emacs does this <http://stackoverflow.com/questions/95631/open-a-file-with-su-sudo-inside-emacs>, and Vim at least allows you to save via sudo <http://www.commandlinefu.com/commands/view/1204/save-a-file-you-edited-in-vim-without-the-needed-permissions>. Nautilus and Explorer both have options to run as superuser, so it should be possible to find the code that does just the access right reading.

2017-06-13 21:33:45.819000
ezust

For windows, you need to start Java already in escalated mode and then jEdit has permissions too. I don't know how to do it to a Java process while it is running.