Nullsoft installer, howto make ProgramData subfolder writable

Question

ProgramData folder is the best place for storing your application's writeable files shared by all users. But when Nsis installer is run with admin privileges (which is required to write to Program Files), then folders and files created in ProgramData folder are read only for all users except admin. How to change that and have writeable files for all users inside ProgramData folder?

Answer 1

I don't know if this behaviour is a feature or a bug, but I've found a workaround. The AccessControl plugin is needed (download and copy Nsis plugins folder). Inside "install" section of Nsis script put something like this:

; This is important to have $APPDATA variable
; point to ProgramData folder
; instead of current user's Roaming folder
SetShellVarContext all

; This sets us permissions
AccessControl::GrantOnFile "$APPDATA\Folder" "(S-1-5-32-545)" "FullAccess"
AccessControl::GrantOnFile "$APPDATA\Folder\*" "(S-1-5-32-545)" "FullAccess"

S-1-5-32-545 is equivalent to all users, so this code will grant full access to the specified folder and all files inside to all users.

Answer 2

or set via command line (Win7 only): ExecWait 'Icacls "$APPDATA\Folder" /grant Users:(OI)(CI)M'