https://techrawcull.netlify.app/tags/security/Recent content in Security on RawCullHugoenThu, 30 Jul 2026 07:59:27 +0200https://techrawcull.netlify.app/docs/security/Thu, 05 Feb 2026 00:00:00 +0000https://techrawcull.netlify.app/docs/security/<h1 id="security-scoped-urls">Security-Scoped URLs<a class="td-heading-self-link" href="#security-scoped-urls" aria-label="Heading self-link"></a></h1> <p>RawCull is a sandboxed macOS app. Any access outside the app container must come from user consent, usually a file/folder picker. RawCull uses two security-scope patterns:</p> <ol> <li>active catalog access for browsing/culling,</li> <li>persistent bookmarks for the rsync copy source and destination.</li> </ol> <h2 id="source-map">Source Map<a class="td-heading-self-link" href="#source-map" aria-label="Heading self-link"></a></h2> <table> <thead> <tr> <th>Area</th> <th>Files</th> </tr> </thead> <tbody> <tr> <td>Active catalog scope</td> <td><code>RawCullViewModel.swift</code>, <code>RawCullViewModel+Catalog.swift</code>, <code>RawCullApp.swift</code></td> </tr> <tr> <td>Catalog scan scope</td> <td><code>Actors/ScanFiles.swift</code></td> </tr> <tr> <td>Copy-folder bookmarks</td> <td><code>Views/CopyFiles/OpencatalogView.swift</code>, <code>SourceAndDestinationSection.swift</code></td> </tr> <tr> <td>rsync runtime scope</td> <td><code>Model/ParametersRsync/ExecuteCopyFiles.swift</code></td> </tr> <tr> <td>File writes needing scope</td> <td><code>ExtractAndSaveJPGs.swift</code>, <code>SaveJPGImage.swift</code>, rsync workflow</td> </tr> </tbody> </table> <h2 id="api-basics">API Basics<a class="td-heading-self-link" href="#api-basics" aria-label="Heading self-link"></a></h2> <p>The core calls are:</p>