667898 - Able to install Aurora without admin rights

Status: RESOLVED INVALID

(Firefox :: Installer, defect)

Description

[Ankur Datta]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0a2) Gecko/20110627 Firefox/6.0a2
Build ID: 20110627042004

Steps to reproduce:

1) Downloaded the Aurora exe- firefox-6.0a2.en-US.win32.installer
2) I had a freshly formatted Windows 7 32 bit laptop
3) Did not have Admin rights on my user
4) Started Installation
5) Windows asked me to provide a Admin credential
6) Gave my non admin credential which was not accepted
7) Dismissed the dialog from windows
8) Continued installation of Aurora without admin rights
9) Installation succeded
10) Able to use Aurora and right now filing this bug using it



Actual results:

Installation succeeded without Admin rights.


Expected results:

Installation should not have happened without admin rights

Comment 1

[Benjamin Smedberg]

I don't believe this is a bug. It's certainly not a security issue. It's perfectly normal to be able to install software into your user area (c:\users\username\Program Files) without requiring administrator privileges, and I believe that's what our installer does by default if it cannot obtain admin privileges to install into a global location. Robstrong, please correct me if I'm wrong.

In any case, there's no need for this bug to be private: there's no exploit here.

Comment 2

[Robert Strong (they/them - no direct email)]

bsmedberg is correct and this is intentional.