Click to close the image preview
Edit: keep in mind that this is just FYI. I do not need these things fixed. I don't have any clients that need these things fixed. Please let me know if you can reproduce these issues so that I can dump the changes to the VM.
In version 126.96.36.199 on Windows 7, try these steps:
Have a user with admin privileges select a few files for backup and log off
Have a user with standard user privileges select a few files for backup and log off
Have the admin log back on and discover that all file for the admin profile are no longer selected.
That is what the video in this post was supposed to show - instead, it was marked as the solution. I suppose because it showed the OP how to not use the backup sets and to use the file system instead. I wondered if I went too fast in that video - so, for the videos below, I hover over the hard drive activity indicator between user logon sessions just to make sure that I was not causing the problems by rushing things.
I wondered if version 188.8.131.52 had fixed any of these multiple user issues.... so:
The initial file selections for all 3 user profiles mentioned below were made using the admin profile but the settings window was not opened as admin (not that it would have made any difference to run it as admin for these issues).
Admin (dr seuss) selects 4 out of 6 files from the desktop for backup and logs out
Standard user (thing1) adds (or deselects) a file to be backed up and logs out
The admin now has all 6 files selected for backup???
Admin selects 4 out of 6 files from the desktop for backup
Admin selects 4 out of 6 files from the desktop for thing1 and thing2 for backup
Admin logs out
thing1 adds one file to be backed up
Just like above - the admin now has all 6 files selected for backup...
...but let's look at thing2's files - all gone :-(
Same setup - all users have 4 files from their desktops selected for backup by the admin
thing1 has a bad day. thing1 deselects that cat's poems. thing1 also deselects a secret folder that was hiding the cat's web surfing habits. thing1 blushes. The cat is embarrassed. (but at least thing2's folders are safe from thing1's prying eyes)
Maybe Mozy should require admin rights for the entire settings window interface.
Here are the settings for the 3 users:
Solved! Go to Solution.
Twice, I managed to get Mozy into a state where it would not recognize the 4 files on the admin's desktop. I'm not sure of the steps needed to reproduce that issue. I ended up editing those files to get them to show up in the file system tab again. Even though the 4 files did not show as being selected for backup, completing a manual backup did not mark them for deletion.
[I probably pushed things a bit too fast on file4 - I should have waited a tiny bit longer between the file edit and opening the settings window - file4's change had not been indexed yet.]
I've run few test cases based on your videos all it everything looks permission related to me.
I would recommend you to run all the test with read permission setup on each other User's folder.
Admin user should have right on all Standart user by default, but try to give read access to the Admin's folder for the user group 'Users'.
I would need to do a video of the test I've done but basically with the read access on the all folder I was able to change the backup selection wherever I was without impacting other user's selection.
But... the videos were from a fresh install of W7. It hardly seems reasonable to expect your customers to muck with permissions just to make the product work. Also, changing the permissions does not protect dr seuss' privacy. A standard user should not see the folder names of an admin.
This thread is a part of this Idea thread:
The Mozy client has changed a bit since I made the original post.
Things are even worse now with Version: 184.108.40.2062.
A STANDARD user (that does not know the ADMIN's password) can...
...select ADMIN folders to be backed up
...deselect ADMIN folders to be backed up
...inadvertently deselect ADMIN files
...download/read every file backed up to the Mozy account.
A manual backup was run before the video was made. There was only one file selected for backup for the entire Mozy account. That file was the text file shown in the settings window on the ADMIN's desktop. Mozy will deselect that ADMIN's desktop file when the STANDARD user saves the configuration.
After another manual backup, this is what history showed:
A STANDARD user (who does not know the ADMIN's password) can see every file on the account:
If there is enough space on the Mozy account, a STANDARD user can select the top level user folder named ADMIN and the Mozy client will upload every file to Mozy (which the STANDARD user can then browse thru via Mozy's web based interface and silently/secretly download selected files). If there is not enough space, then the STANDARD user can work thru each sub-folder. For the actions taken in the above video, there will be no e-mail sent to the Mozy account owner since it was not that type of file restore. Also, the STANDARD user can clear the history logs.
Even without malicious intent, the actions taken be either user (ADMIN or STANDARD) can have unintended consequences for the other user. The ADMIN can inadvertently deselect every file from the STANDARD user's folders without ever clicking on them.
Even if the STANDARD user has no desire to upload (and then download) the files of the ADMIN user, sensitive info can be revealed to the STANDARD user just by the Mozy app showing those ADMIN folder names. Ryan (the STANDARD user) did not know that he was adopted. This was not the way that his parents envisioned telling him.
BTW, I rushed things for the sake of keeping the videos short. That has no impact on the problems shown. I can reproduce the problems even if I wait an hour before logging off from each Windows account. Also, the first video shows making changes to the files that are selected for backup without making a backup between each change. It does not matter. The results are the same even if a backup is forced after each change.
I uninstalled/restarted/re-installed Mozy twice. Each time, no settings were save. Each time, I manually checked that Mozy's program folders were gone before re-installing the Mozy client. The testing was done on a Windows 7 pro 64bit OS inside a Virtual Machine. All OS patches were up to date. Other than the flaws shown above, the Mozy client functioned as expected (e.g. it did not hang during backups).
I am aware that the Mozy client can be set to not allow access to the settings window unless one knows the password on the Mozy account. This is not the default setting and I doubt that many users change that option. That said, it is safest to use a STANDARD user account for day to day use. Even if there is only one user on the computer, that one user might very well have an ADMIN and a STANDARD user account. The Mozy app should work across multiple accounts.
Can you PM me with their user email associated with their machine so I can attach this to our investigation?