From 5feee8cc68d34a35b1ecd6b834d0ab662248affe Mon Sep 17 00:00:00 2001
From: Manika SInghal <69899716+Manika-EDB@users.noreply.github.com>
Date: Tue, 17 Dec 2024 07:08:26 +0000
Subject: [PATCH] Installation issue in WinRM session

As reported by few users, installation fails when the installer is run remotely
through WinRM or remote powershell, because initdb fails to read the password file.
The password file is created inside the temporary directory which is
created with the locked down ACLs but it seems it is not applied to the object descendant.
Hence, enable recurseObjects in the action to fix the issue.
For local installation, the logon session ID (NT AUTHORITY\LogonSessionId_0_2173841:(RX))
allowed the read access to the password file.

DBP-939: PostgreSQL installer does not work over a WinRM session
-- Manika Singhal, Tested by- Manika Singhal, Reviewed by- Sandeep Thakkar
---
 server/installer.xml.in | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/installer.xml.in b/server/installer.xml.in
index 70f3438b..91a4d7b3 100755
--- a/server/installer.xml.in
+++ b/server/installer.xml.in
@@ -155,6 +155,7 @@ EOF
                         <setWindowsACL>
                             <action>allow</action>
                             <files>${system_temp_directory}/${dirPrefix}_${random_number}</files>
+                            <recurseObjects>1</recurseObjects>
                             <permissions>generic_all</permissions>
                             <users>${whoami}</users>
                         </setWindowsACL>
@@ -178,6 +179,7 @@ EOF
                         <setWindowsACL>
                             <action>allow</action>
                             <files>${system_temp_directory}/${dirPrefix}_${random_number}</files>
+                            <recurseObjects>1</recurseObjects>
                             <permissions>generic_all</permissions>
                             <users>${env(USERDOMAIN)}\${system_username}</users>
                         </setWindowsACL>