Page MenuHome

Saving on the C: Drive - Ignores Group Policy
Closed, ArchivedPublic

Description

Hi,

I'm and IT technician in a school and looking at installing this program for our Computer Science Students.

After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway.

Is there a fix or a way around this please?

Many Thanks

Osian Davies

System Information
Operating system:
Graphics card:

Blender Version
Broken:
(example: 2.79b release)
(example: 2.80, edbf15d3c044, blender2.8, 2018-11-28, as found on the splash screen)
Worked: (optional)

Short description of error

Exact steps for others to reproduce the error
Based on the default startup or an attached .blend file (as simple as possible).

Details

Type
Bug

Event Timeline

Stephen Swaney (stiv) triaged this task as Needs Information from User priority.

Are you using an operating system?
Also, it helps to mention what version of Blender.

Win 10 64 bit
Latest version of Blender, downloaded form the website today. Blender 2.79

Thanks You

This is going to sound snarky, but we have a bug report form for a reason. We expect it to be filled out. Please do so, then we can take a closer look at the issue.

Thanks.

A group policy is not something software needs to/can check/can choose to ignore, we're just requesting the Windows API to write a file to a specific location, if the OS goes, "that is allowed" it'll happen, if there a policy prohibiting writing a file to a specific location the windows API will block it.

System Information
Operating system: Win 10 64 bit
Graphics card: Intel HD Graphics 530

Blender Version : Blender 2.79
F4dc9f9db86

Short description of error
I'm and IT technician in a school and looking at installing this program for our Computer Science Students.

After doing some testing it seems pupils can save files to the C Drive. This is blocked by group policy but Blender seems to ignore it and lets them do it anyway.

Is there a fix or a way around this please?

Exact steps for others to reproduce the error:

InstalWindows Domain
DC: Win Server 2012 R2

What group policy do you have set up exactly?
Are you sure a standard user account can't create a file on the C Drive?
C:\Users\notadmin\AppData\Local\Temp is the default temp directory for Blender and many other programs and they would break if it was Read-only...

I guess this is about the "Hide these specified drives in My Computer" feature, which is not for security but just hiding some drives in file browsers. Might be good to support that in Blender, not sure we'd consider it a bug though.

Hi,

Sorry it's taking so long to get information back to you, the 3rd liners on the support desk are answering your questions as they are the ones that are trying to install it.

I believe @Brecht Van Lommel (brecht) has figured it out.
Are there any plans to add this as a feature?

In Education environemtns we don't even let staff have access or see the C: Drive never mind the pupils.

Probably not a bug no, but this was the only place I could find to speak to people who were involved with the software directly.

Thanks Very Much

Philipp Oeser (lichtwerk) raised the priority of this task from Needs Information from User to Needs Triage by Developer.

Since user info is here, putting back to "Needs triage by developer" (to decide if this would be supported at some point / or if this would be considered a bug)

It's a feature request and it's honestly just Security theater, even if we implement hiding drives in the file browser like explorer does all we'd be doing is giving admins a false sense of security, nothing is stopping a student from running bpy.ops.save_as_mainfile("c:\someplace\whiii.blend"), manually entering paths in many of our UI elements or stop them from using any of the other file-io API's in python, if you don't want users to write files at a certain location it'll have to be enforced OS/filesystem level, not in the 'uhh we'll just hide in the in applications UI, you feel safer now? well you're not but ok....' level.