Changes between Version 12 and Version 13 of ClientSetupWinSix

Timestamp:

Jun 16, 2008, 11:35:05 AM (16 years ago)

Author:

davea

Comment:

--

ClientSetupWinSix

@@ -19 +19 @@
  * Simplified installer interface
 
-=== Multi-user protection policy ===
-
-The installer offers two protection modes:
-
- * '''Public''': all users on the host can control BOINC (i.e. attach/detach projects) using the BOINC Manager.
- * '''Private''': The only users who can control BOINC are: the installing user; administrator; members of the 'boinc_users' group.  When other users run the BOINC Manager, they'll get a dialog saying to contact the administrator to add them to the 'boinc_users' group.
-
 == Account-based sandboxing ==
 
 The installer offers two security modes:
 
- * '''Secure''': the BOINC client and applications run under unprivileged accounts.  The client runs as a service (this is necessary because Windows lacks a "setuid" feature; running a program as a different user requires storing the password of that user, which we don't want to do).
+'''Secure''': the BOINC client and applications run under unprivileged accounts.
+The client runs as a service
+(this is necessary because Windows lacks a "setuid" feature;
+running a program as a different user requires storing the password of that user,
+which we don't want to do).
 
- * '''Graphics compatible''': the client and applications run under the account the user who logged into the system.  This allows users to see graphics from older as well as newer science applications, or projects with long running tasks which won't complete for a while.  The client does not run as service (otherwise graphics wouldn't work).  This option is available only with the Private protection policy.
+'''Graphics compatible''': the client and applications run under the account the logged-in user.
+This allows users to see graphics from older as well as newer science applications,
+or projects with long running tasks which won't complete for a while.
+The client does not run as service (otherwise graphics wouldn't work).
+With this option, only the installing user and members of the Administrators group
+can control BOINC (i.e. attach/detach projects).
 
 The advantages of Secure mode are:
@@ -45 +47 @@
 
 In graphics compatible mode, the BOINC Manager is launched when the installing user logs on (a shortcut to it is in the user's Startup folder).  The Manager in turn launches the BOINC client.
+
+=== Access control modes ===
+
+With Secure installs, the installer offers two access-control modes:
+
+'''Public''': all users can control BOINC.
+
+'''Private''': The only users who can control BOINC are: the installing user,
+members of the Administrator group, and members of the 'boinc_users' group.
+When other users run the BOINC Manager,
+they'll get a dialog saying to contact the administrator to add them to the 'boinc_users' group.
 
 == Separation of executable and data files ==