Sandboxing support?

[jfahrenkrug]

I'm using iMedia in an app and I want to/have to activate Application Sandboxing for my app.
When activating the Pictures Folder Access and the User Selected File Assets entitlements (those were the ones that I thought made sense), neither the Lightroom nor the iPhoto libraries show up.

Does that basically mean that we can basically forget using iMedia in Mac App Store apps starting June 1st?

In Console.app, I get these Sandbox messages:

09.05.12 17:21:58,778 sandboxd: ([32133]) PrinTao(32133) deny file-read-data /Users/johannes
09.05.12 17:21:58,779 sandboxd: ([32133]) PrinTao(32133) deny file-read-data /Users

Any ideas? Will we only be able to use iMedia with files that the user explicitly selects through an Open Panel? That would basically render it as being useless, doesn't it?

[mikeabdullah]

We're working on moving to a combination of XPC+temporary entitlement to have the framework work better under sandboxing. In the shorter term, a temporary entitlement for the necessary app preferences, and matching adjustment to the code is required. I'll be sorting that soon too.

[jfahrenkrug]

Great, thanks for the info, Mike!

[mikeabdullah]

If you want to check it out, the sandbox-compatibility branch is nearly done. Search the headers for SANDBOXING: to see all the comments and temporary entitlements you'll need.

[yoavhacohen]

I'm trying to use the sandbox-compatibility branch, and I think that I found a bug:

1. Drag a folder located outside the allowed scope of the app.
2. Turn off the app and open it again.
3. iMedia should remember this folder, but it does not have permissions to read it now.

I think that a possible solution is to use app-scoped bookmark:
http://developer.apple.com/library/mac/#documentation/Security/Conceptual/AppSandboxDesignGuide/AppSandboxInDepth/AppSandboxInDepth.html#//apple_ref/doc/uid/TP40011183-CH3-SW16

[jfahrenkrug]

@yoavhacohen app-scoped bookmarks are the only way to make this work.

[yoavhacohen]

OK, so is it planned to fix this issue by using app-scoped bookmarks?

[mikeabdullah]

It is indeed. I just haven't had time yet. You're welcome to send me a patch for it.