From 2f959ff6acb19ed6f45d723221d8d1f43b11207f Mon Sep 17 00:00:00 2001
From: Manuel Thalmann <m@nuth.ch>
Date: Thu, 29 Jun 2023 20:02:12 +0200
Subject: [PATCH] Allow anyone to edit config

---
 scripts/Windows/Scripts/Context.ps1 | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/scripts/Windows/Scripts/Context.ps1 b/scripts/Windows/Scripts/Context.ps1
index 0e7d1355..35c8c75e 100644
--- a/scripts/Windows/Scripts/Context.ps1
+++ b/scripts/Windows/Scripts/Context.ps1
@@ -26,6 +26,15 @@ class Context {
     [Microsoft.Win32.RegistryKey] EnsureConfigKey() {
         if (-not (Test-Path $this.ConfigRoot)) {
             $null = New-Item $this.ConfigRoot;
+            $acl = Get-Acl $this.ConfigRoot;
+
+            $acl.AddAccessRule(
+                [System.Security.AccessControl.RegistryAccessRule]::new(
+                    [System.Security.Principal.SecurityIdentifier]::new([System.Security.Principal.WellKnownSidType]::AuthenticatedUserSid, $null),
+                    [System.Security.AccessControl.RegistryRights]::FullControl,
+                    [System.Security.AccessControl.InheritanceFlags]::ObjectInherit -bor [System.Security.AccessControl.InheritanceFlags]::ContainerInherit,
+                    [System.Security.AccessControl.PropagationFlags]::None,
+                    [System.Security.AccessControl.AccessControlType]::Allow));
         }
 
         return Get-Item $this.ConfigRoot;