Overview Of Permission Controls - Adobe FLEX 2-PROGRAMMING ACTIONSCRIPT 3.0 Manual

The mms.cfg file
On Mac OS X systems, the mms.cfg file is located at /Library/Application Support/
Macromedia/mms.cfg. On Microsoft Windows systems, the file is located in the Macromedia
Flash Player folder in the system directory (for example,
C:\windows\system32\macromed\flash\mms.cfg on a default Windows XP installation).
When Flash Player starts, it reads its security settings from this file, and uses them to limit
functionality.
The mms.cfg file includes settings that the administrator uses to perform the following tasks:
Data loading—Restrict the reading of local SWF files, disable file downloading and
■
uploading, and set the storage limit for persistent shared objects.
Privacy controls—Disable microphone and camera access, prevent SWF files from
■
playing windowless content, and prevent SWF files in a domain that does not match the
URL displayed in a browser window from accessing persistent shared objects.
Flash Player updates—Set the interval for checking for an updated version of Flash
■
Player, specify the URL to check for Flash Player update information, specify the URL
from which to download updated versions of Flash Player, and disable automatic updates
of Flash Player entirely.
Legacy file support—Specify whether older-version SWF files should be placed in the
■
local-trusted sandbox.
Local file security—Specify whether local files can be placed in the local-trusted sandbox.
■
Full-screen mode—Disable full-screen mode.
■
A SWF file can access some information on capabilities that have been disabled by calling the
Capabilities.avHardwareDisable
properties. However, most of the settings in the mms.cfg file cannot be queried from
ActionScript.
To enforce application-independent security and privacy policies for a computer, the mms.cfg
file should be modified only by system administrators. The mms.cfg file is not for use by
application installers. While an installer running with administrative privileges could modify
the contents of the mms.cfg file, Adobe considers such usage a violation of the user's trust and
urges creators of installers never to modify the mms.cfg file.
and
Capabilities.localFileReadDisable

Overview of permission controls

453