Unable to write file even with right entitlement option.

Here is my parent.plist file contents:

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.application-groups</key>
    <string>GROUP.STRINGHERE</string>
    <key>com.apple.security.files.user-selected.read-write</key>
    <true/>
  </dict>
</plist>

Here is my child.plist file

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.inherit</key>
    <true/>
  </dict>
</plist>

My signing command:

electron-osx-sign \"XXXX-mas-x64/XXXX.app\" --verbose --identity=\"****\" --entitlements=./entitlements/parent.plist --entitlements-inherit=./entitlements/child.plist --platform=mas --version=1.0.2 --provisioning-profile=./XXXXX.provisionprofile --type=development

Error that I am getting:

deny file-write-create App doesn’t have permission to write file.

The file is being saved from a user dialog, they select location and file if written to that location.

[chryb]

@trigun539 I have found the problem. It has nothing to do with electron-osx-sign, however, it’s caused through jetpack-fs. Jetpack has an atomic mode to save files securely, but this creates a new temporary file. The sandbox doesn’t allow to create this file. I will add an issue to the jetpack repo.

[trigun539]

@chryb the problem is that you depend on the user to “add” the extension themselves. If they don’t add it while in the save popup, then you only have access to “sample” not “sample.md”. I kept trying to add the extension programatically and failed because I didn’t have access.