From a0663ca796440a121b7fae7ae7361fc70e920206 Mon Sep 17 00:00:00 2001
From: Manika SInghal <69899716+Manika-EDB@users.noreply.github.com>
Date: Tue, 17 Dec 2024 07:08:26 +0000
Subject: [PATCH] Installation issue in WinRM session

As reported by few users, installation fails when the installer is run remotely
through WinRM or remote powershell, because initdb fails to read the password file.
The password file is created inside the temporary directory which is
created with the locked down ACLs but it seems it is not applied to the object descendant.
Hence, enable recurseObjects in the action to fix the issue.
For local installation, the logon session ID (NT AUTHORITY\LogonSessionId_0_2173841:(RX))
allowed the read access to the password file.

DBP-939: PostgreSQL installer does not work over a WinRM session
-- Manika Singhal, Tested by- Manika Singhal, Reviewed by- Sandeep Thakkar
---
 server/installer.xml.in | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/installer.xml.in b/server/installer.xml.in
index a1986a57..ee4f1cda 100755
--- a/server/installer.xml.in
+++ b/server/installer.xml.in
@@ -155,6 +155,7 @@ EOF
                         <setWindowsACL>
                             <action>allow</action>
                             <files>${system_temp_directory}/${dirPrefix}_${random_number}</files>
+                            <recurseObjects>1</recurseObjects>
                             <permissions>generic_all</permissions>
                             <users>${whoami}</users>
                         </setWindowsACL>
@@ -178,6 +179,7 @@ EOF
                         <setWindowsACL>
                             <action>allow</action>
                             <files>${system_temp_directory}/${dirPrefix}_${random_number}</files>
+                            <recurseObjects>1</recurseObjects>
                             <permissions>generic_all</permissions>
                             <users>${env(USERDOMAIN)}\${system_username}</users>
                         </setWindowsACL>