Daniel JalkutVerified account

In this scenario, an app like Adobe’s might have "I need to delete /.adobe", and the system would prevent it deleting /.bzvol.

Because Apple’s sandboxing limitations are so rigid, some developers who would otherwise "do the right thing" won’t even bother trying.

@danielpunkass I haven’t had to use an adobe product in 3 years #blessed

@danielpunkass Can you expand on that? I think I get it but I’m not sure.

@gte Basically going back to my argument 4 years ago that Apple should cover all possible behaviors in the sandbox, to encourage adoption.

@danielpunkass Ok gotcha. I’m not super sure how you can express *everything* but I get the argument. Expression of intent is a good goal.

@gte Right. Well, they did try to a large extent to do this, in response to developer outcry, but they didn’t go far enough in my opinion.

@danielpunkass What’re you missing? Access to media is kind of a pain these days. (You can do it through the OpenPanel in a lame way)

@gte TextExpander is good example: an entitlement to authorize event tapping, because, yes, there are trusted apps that need this. @grynspan

@danielpunkass @gte @grynspan Right. I want TextExpander to be able to tap events. I don’t need it to access my whole hard disk or network.

@danielpunkass Right now, must forego all sandbox protections if your app needs one thing that doesn’t work in the sandbox.