I am currently planning on fixing our User Management code. Before i do i'd like some advice.
First, We need to decide on some folder names for User Profiles. I'd recommend a "ReactOS Users" folder or equivalent. This doesn't interfere with Windows nor older versions of ReactOS.
Second, I'm beginning to understand enough about MSGINA/WinLogon/and the log on process in general that i could probably implement a basic form of user authentication. However, this will mean that ROS will end up asking for a username/password every time it boots...shall i implement this now and maybe add an #if 0 to skip over it? Or shall we use some sort of auto login functionality. (like windows, but the implementation won't be the same, i'm unsure about how windows accomplishes it)
Eric Khol has done a good job with alot of the security related stuff, but there is soooo much more to be added, and alot to be changed. (As previously mentioned here and discussed on IRC, Windows does NOT USE environment variables in the registry. The stuff is hardcoded, registry is set up the first time the user logs on.)
Richard Campbell wrote:
I am currently planning on fixing our User Management code. Before i do i'd like some advice.
First, We need to decide on some folder names for User Profiles. I'd recommend a "ReactOS Users" folder or equivalent. This doesn't interfere with Windows nor older versions of ReactOS.
Well, maybe default to Documents and Settings for apps that are hardcoded for that, but if Setup detects that that is already there then it will ask the user for a different one and/or default to something like "Documents and Settings.ROS" or something like that.
-uniQ
"Richard Campbell" eek2121@comcast.net wrote:
I am currently planning on fixing our User Management code. Before i do i'd like some advice.
First, We need to decide on some folder names for User Profiles. I'd recommend a "ReactOS Users" folder or equivalent. This doesn't interfere with Windows nor older versions of ReactOS.
I don't know if this is a good idea. Average users will expect a localized 'Documents and Settings' directory. Renaming it will confuse them. ReactOS already solves naming conflicts with existing Windows installations.
Eric Khol has done a good job with alot of the security related stuff, but there is soooo much more to be added, and alot to be changed. (As previously mentioned here and discussed on IRC, Windows does NOT USE environment variables in the registry. The stuff is hardcoded, registry is set up the first time the user logs on.)
I already have a patch for the common shell folders in the HKLM branch and I'll fix the HKCU branch tomorrow. I already wanted to fix this some time ago but the registry was playing some dirty tricks on me. This was caused by the bitmap routine bug that was fixed a few days ago.
Regards, Eric
Richard Campbell wrote:
I am currently planning on fixing our User Management code. Before i do i'd like some advice.
First, We need to decide on some folder names for User Profiles. I'd recommend a "ReactOS Users" folder or equivalent. This doesn't interfere with Windows nor older versions of ReactOS.
Second, I'm beginning to understand enough about MSGINA/WinLogon/and the log on process in general that i could probably implement a basic form of user authentication. However, this will mean that ROS will end up asking for a username/password every time it boots...shall i implement this now and maybe add an #if 0 to skip over it? Or shall we use some sort of auto login functionality. (like windows, but the implementation won't be the same, i'm unsure about how windows accomplishes it)
One possibility: Make sure the ability to "auto login" as a user is also implemented, and give an option during ros setup to enable it (for now anyways).
Eric Khol has done a good job with alot of the security related stuff, but there is soooo much more to be added, and alot to be changed. (As previously mentioned here and discussed on IRC, Windows does NOT USE environment variables in the registry. The stuff is hardcoded, registry is set up the first time the user logs on.) _______________________________________________ Ros-dev mailing list Ros-dev@reactos.com http://reactos.com:8080/mailman/listinfo/ros-dev
.