Bug 601 - Workrave requires elevation
Status:
RESOLVED FIXED
Component:
Core :: Win32
Version:
cvs
Hardware:
PC Windows Vista
Importance:
P4 normal
Target Milestone:
---
Assignee:
Raymond Penners
URL:
Depends on:
Blocks:
Reported:
Mar 13 2007 23:08:04 UTC
by:
Scott McDermott
Modified:
Sep 19 2007 22:51:59 UTC
CC List:
Ray Satiro
WhoWhenWhatRemovedAdded
Ray SatiroMar 25 2007 20:01:27 UTCccRay Satiro
Rob CaelersAug 27 2007 14:04:05 UTCpriorityP2P4
Ray SatiroSep 19 2007 22:51:59 UTCstatusNEWRESOLVED
resolutionFIXED
Description
Scott McDermott  Mar 13 2007 23:08:04 UTC
As of 1.8.4 Windows Vista says that Workrave needs elevated privileges in order to run.
Comment 1
Ray Satiro  Mar 25 2007 20:01:27 UTC
It is probably necessary to run Workrave with a high integrity level so that it can communicate with all applications on the desktop in Windows Vista. You can check out bug #590 to see what I'm talking about.
Comment 2
Scott McDermott  Mar 27 2007 16:15:30 UTC
(In reply to comment #1)
> It is probably necessary to run Workrave with a high integrity level so that it
> can communicate with all applications on the desktop in Windows Vista. You can
> check out bug #590 to see what I'm talking about.

This would make sense. That said, I would much rather have Workrave not detecting activity in applications running in an elevated state than be required to run in an elevated state. Workrave has no business running at a high integrity level and not everyone has administrator privileges.
Comment 3
Ray Satiro  Mar 27 2007 18:58:57 UTC
(In reply to comment #2)
> This would make sense. That said, I would much rather have Workrave not
> detecting activity in applications running in an elevated state than be
> required to run in an elevated state. Workrave has no business running at a
> high integrity level and not everyone has administrator privileges.
> 

I see what you mean. UAC requires you to start Workrave 1.8.4 as an Administrator even if you set your security policy to run the program as a basic user. It still runs with high integrity if you use icacls to set the integrity level to medium. I don't know if that's UAC auto-detection or if that's intended with a program manifest.
Comment 4
Rob Caelers  Mar 27 2007 20:49:47 UTC
I changed Workrave 1.8.4 to request administrator privileges (using a manifest file) because otherwise Workrave did not monitor activity in a DOS-box. It seems that this is no longer needed: Workrave now uses low-level keyboard/mouse hook to monitor users' activity.

The next nighly build (>= March 28) will no longer request admin privileges.