; Grant standard (non-admin) users read/execute on the install tree.
; Elevated installs into Program Files often create admin-only ACLs, which
; breaks launcher.exe and bun reading deeplink.js for normal users.
!macro grantUsersInstallAccess
  Push $0
  DetailPrint "Granting standard users read and execute access to $INSTDIR"
  ExecWait '"$SYSDIR\icacls.exe" "$INSTDIR" /inheritance:e /T /C' $0
  DetailPrint "Enabled inherited permissions (exit code: $0)"
  ExecWait '"$SYSDIR\icacls.exe" "$INSTDIR" /grant *S-1-5-32-545:(OI)(CI)RX /T /C' $0
  DetailPrint "Granted Users read/execute (exit code: $0)"
  Pop $0
!macroend