Thread: Using Calibre as a client for another Calibre instance?
View Single Post
Old 06-28-2010, 05:10 AM   #23
toddos
Guru
toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.toddos ought to be getting tired of karma fortunes by now.
 
toddos's Avatar
 
Posts: 695
Karma: 822675
Join Date: May 2010
Device: Kobo Aura, Nokia Lumia 920 (Freda)
Quote:
Originally Posted by JvdW View Post
That is easy: Administrators have network access and if you run services using the SYSTEM account or the special accounts available on Vista/Win7 then you can't access files on UNC paths or mapped drives.

The trick usually is to make a special account for this kind of operations which allows it to read/write to the network but doesn't have any rights on the rest of the system(s).

Regards,

Joop
The built-in NETWORK SERVICE account has network access and can read UNC paths where it has permissions. In an earlier post I sorted through all of the permissions required to allow network service to run/access Calibre, but that gets blown away on upgrade. Calibre updates so often that I've just sucked it up and switched to running the service as admin. Not ideal, but it works. It'd be great if we could get mysql or postgesql backend support for Calibre some day (sqlite doesn't necessarily migrate easily, but it's still SQL-ish so with enough work it should be possible). I realize that's not high on Kovid's list and I don't have personal time at the moment to take on such a huge project so I'll live with my hack.

Edit: Actually, let me amend that slightly. Something happened during an upgrade that broke my service running as network service. Checking my permissions, everything seems to still be correct, but after an upgrade (maybe it was 0.6 to 0.7?) the service stopped working and I hadn't had time to debug it. It could be a change in code that requires more/different permissions, or that requires permissions somewhere I haven't provided them. Network service has permissions to read/execute calibre-server and read/write the database, but no permissions to read or write the actual book location. I figured that was the safest way to protect my books since I have to give write access to the database due to sqlite. Maybe a change to the catalog/server now requires reading the library as well as the database, I don't know. Eventually I'll get around to debugging it, or not and just live with running as admin.
Last edited by toddos; 06-28-2010 at 05:17 AM.
toddos is offline   Reply With Quote