Filesystem Access
- Karl Tompson
The Downloader service runs un-attended and can be accessed by multiple different clients with different logons. All filesystem interaction is performed with the service logon, which is the Local System account by default.
The following security considerations apply to download locations:
When setting the location, the client user must have directory listing access. This is to avoid exposing filesystem areas the user would not otherwise have access to.
Files are created by the service logon. If other users need direct access to these files additional filesystem configuration may be necessary.
Downloaded files can be retrieved via the client application even when the client user cannot access them directly, but only if the client user has access to the Connection.
You may encounter the error “Directory does not exist or access denied to service user“ if you attempt to set a download location to a network path. This can occur for valid paths when the service logon does not have permission.
The “FuseIT Downloader Service“ service can be changed to run with a different logon in the usual manner via the Windows Services control panel.
If you do this, please ensure that the user has at minimum read access to the service installation directory and all files within:
\Program Files (x86)\FuseIT.Downloader\Service\
The following files in this location require write access:
appsettings.json
FuseIT.Downloader.db
license.key