With Windows 10, Microsoft introduced a mutual platform, called Universal Windows Platform (UWP), that allows apps to function on whatever device running Windows 10, including desktop PC, Xbox, IoT, Surface Hub, as well as Mixed-reality headset.
UWP apps stimulate got the might to access for certain API, files similar pictures, music, or devices similar photographic television set camera as well as microphone, yesteryear declaring required permissions inward their bundle manifest (configuration) file.
By default, UWP apps stimulate got access to directories, where the app is installed on the users’ organisation as well as where the app tin shop information (local, roaming as well as temporary folders).
However, to access other files on a system, including sensitive resources, Microsoft offers several types of capabilities that an application tin purpose yesteryear declaring their permission inward the manifest file.
One such extensive capability, called broadFileSystemAccess (Broad Filesystem Access), allows an application to access the file organisation at the same score every mo the user who launched the app.
However, according to Microsoft, this is a restricted capability that, if used, volition trigger a user-consent prompt spell users commencement launch the app, bespeak them to grant or deny this permission to the app.
"On commencement use, the organisation volition prompt the user to permit access. Access is configurable inward Settings > Privacy > File system. If y'all submit an app to the Store that declares this capability, y'all volition demand to provide additional descriptions of why your app needs this capability, as well as how it intends to purpose it," Microsoft documentation says.
According to Windows app developer Sébastien Lachance, Windows 10 version prior to Oct 2018 Update failed to display prompts for permission to access the file organisation due to a bug, obviously leaving users sensitive information exposed to apps downloaded from Windows Store.
In other words, until version 1809, the apps could genuinely hold upwards used to access the entire file organisation without prompting users for the permission.
Lachance learned virtually the põrnikas when 1 of his application that uses broadFileSystemAccess permission started crashing after he installed the Windows 10 Oct 2018 Update.
In guild to forestall crashes, Andrew suggested Windows app developers include a unproblematic draw of piece of job of code inward their affected software that volition forcefulness their users to stimulate got the novel file access permission inward the settings earlier launching the application.
Since Microsoft halted the roll-out of the Windows 10 Oct Update due to a file-wiping bug, users who don't stimulate got the update tin limit UWP apps access to the file organisation on their Windows 10 reckoner via Settings → Privacy → File system.
