There’s no supported way to read the kSecAttrAccessControl property. Even if you could get back at SecAccessControl object — and I’m not sure that’s true — it has no getters. I’m pretty sure I cover that in SecItem: Pitfalls and Best Practices… oh… well… kinda. Check out the Add-only Attributes section. Given that, there’s really only one useful thing you can do with kSecAttrAccessControl, namely, configure it when creating an item using SecItemAdd. For most folks that’s sufficient, because they know how they created the item because… well… they created it. The only time this breaks down is when you have multiple versions of your app and they use different access control settings. In that case I think your best option would be to use some other attribute, like kSecAttrService, to ‘version control’ your use of this property. You should feel free to file an enhancement request for better APIs for this. And if you do, please post your bug number, just for the record. [quote='849755021, sheishman, /thread/849755,
Topic:
Privacy & Security
SubTopic:
General
Tags: