We just got a rejection on an update to an existing app from the (Mac) app store due to the use of
com.apple.security.temporary-exception.files.home-relative-path.read-write TRUE
I think its something JUCE adds? Does anyone knows if there’s a way to get rid of that/what does it mean? We’re building with CMake.
Any help would be greatly appreciated!
reuk
May 18, 2023, 12:05pm
2
Looks to me like that’s added if APP_SANDBOX_ENABLED is TRUE and APP_SANDBOX_FILE_ACCESS_HOME_RW has been set. If you’re using APP_SANDBOX_FILE_ACCESS_HOME_RW, you should pass the set of file paths that the app needs to access, rather than just TRUE or FALSE.
2 Likes
Brilliant, thank you.
Can you elaborate on the exact syntax to add those?
reuk
May 18, 2023, 12:47pm
4
It’s documented in the CMake API file in the repo.
juce_add_gui_app(...
APP_SANDBOX_ENABLED TRUE
APP_SANDBOX_FILE_ACCESS_HOME_RW "/path/one" "/path/two"
...
Produces an entitlements.plist like this:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.app-sandbox</key>
<true/>
<key>com.apple.security.temporary-exception.files.home-relative-path.read-write</key>
<array>
<string>/path/one</string>
<string>/path/two</string>
</array>
</dict>
</plist>
2 Likes
Thank you, I was able to solve my problem!