The StoragePickers API can access special folders without permission checks

[Goo-aw233]

Describe the bug

The StoragePickers API can bypass permissions to access special folders
For example, it can directly access the root directory of the C:\Program Files\WindowsApps folder

Steps to reproduce the bug

Use the StoragePickers API to open a folder for selecting file/folder paths

Expected behavior

Access to folders requiring special permissions should be restricted like other APIs. For example, when VS Code attempts to access C:\Program Files\WindowsApps, it will be denied access even if UAC permission is requested

Screenshots

NuGet package version

No response

Packaging type

Packaged (MSIX)/Unpackaged

Windows version

Insider Build (xxxxx)

IDE

No response

Additional context

No response

[DinahK-2SO]

Hi @Goo-aw233, thanks for raising this topic. The condition isn’t actually tied to Storage.Pickers, but rather to the app type.

In short, "full-trust packaged apps" are able to open the WindowsApps folder.

• For example, you can browse this folder from Notepad > File > Open as well.

In contrast, when unpackaged apps attempt to open WindowsApps, they generally trigger the popup you observed - regardless of whether they’re using the new pickers APIs or other APIs.

Let me know if this addresses your question - happy to help!

[Goo-aw233]

Unexpected design 😦, thank you for making me understand