Support Request: [FileManager] copying problem with Removable media

Ticket ID: 5568	Creation Date: 6/21/2007 5:50 PM	Product: SiteKiosk Classic Windows	Attachment: -
TicketType: Support Request	Version: 6.5.150	Language: English
Views: 37557	Last Modification Date: 7/12/2007 12:34 PM	Platform: Windows XP Professional
Level: Closed	IE: 6.0
Bug Status: Fixed	User account: SiteKiosk Restricted User	Bug Frequency: On every start

Support Request: [FileManager] copying problem with Removable media

Reproduction

Configure SITEKIOSK restricted user to be authorized to view F: drive
Configure SITEKIOSK to allow Downloads in "my documents" folder and the use of filemanager
Start SK on SITEKIOSK restricted user
Go to a DL page, such as www.eicar.org --> downloads --> eicar2.zip
On File Manager window, check you zip file has been correctly downloaded
Plug an USB key (which will be mapped on drive F) : the drive F: appears in drives list.
Click your downloaded file and click on "copy" button
Try to choose the Drive F... you can't because it does not appear

Description

There is a bug with the security manager and the file manager.
We would like to authorize our users to be able to download files and to put them on their USB Mass Storage Device (flash, disk...).
To achieve that, we use the restricted user with nearly all security points actived excepted that we do not hide the drive F (on which the USB key will be mapped when plugged). We also configure SK to download files in "My documents" folder.

So when we go to an URL which offers downloads, the file is successfully downloaded into the right folder and then the file manager pops up. At this point, only the "download" location is present in drive list (on the left). The downloaded file is shown in the middle column.
We plug an USB flash disk which is detected by Windows and is mapped on dirve F. The file manager reacts pretty correctly by ading the item "F:\ (F)" in drives list.
We noticed 2 bugs rather annoying :
1°) If the flash disk is empty (no files or folders), when we click on it in the drive list, a message is poping up : "Please insert a disk into drive F". This should not append, thus it is not an optical drive.
Meanwhile, this can be corrected by modifying javascript files of file manager.
2°) more annoying, when we want to copy a downloaded file to our USB disk, we use the copy button. This one shows up a "common dialog" tree view which permits to choose the destination folder. BUT our brand new drive F does not appear in the tree view... It should appear because we have configured system not to hide this drive.
3°) By the way, the way of hiding drive can be easily bypassed by typing an absolute path into any of the "common dialogs" provided by SK. Even if Drive XX is hidden, simply type XX: and all files are shown. this does not mean that drive is editable (thanks to ntfs permissions)

Answer: (1)
Re: [FileManager] copying problem with Removable media	6/21/2007 6:18 PM
Hello, 1°) If the flash disk is empty (no files or folders), when we click on it in the drive list, a message is poping up : "Please insert a disk into drive F". This should not append, thus it is not an optical drive. Meanwhile, this can be corrected by modifying javascript files of file manager. -> A known bug, fixed with SiteKiosk 6.6. 2°) more annoying, when we want to copy a downloaded file to our USB disk, we use the copy button. This one shows up a "common dialog" tree view which permits to choose the destination folder. BUT our brand new drive F does not appear in the tree view... It should appear because we have configured system not to hide this drive. -> You need to explicitely allow the drive letter under the user defined settings of the SiteKiosk System Security manager and you should not have ticked the policy to hide My Computer because that is where drives are associated to. The dialog used for copying is a Windows dialog which features are based on the Windows rights and policies set for the user it is called under. 3°) By the way, the way of hiding drive can be easily bypassed by typing an absolute path into any of the "common dialogs" provided by SK. Even if Drive XX is hidden, simply type XX: and all files are shown. this does not mean that drive is editable (thanks to ntfs permissions) -> That is knoen a not a bug but the way the Windows rights managment works, which is used by SiteKiosk.