User:hoakley allow append allows the user hoakley to append data to that item. User:hoakley deny read,write prevents the user hoakley from reading or writing that item Group:everyone deny delete prevents those in the everyone group from deleting that item If that sounds far fetched, I’ve already heard of several users who have ended up with strange ACLs set for their Home folders which have resulted in problems.Įach ACL consists of a list of ACEs, the individual access controls, which are like simple sentences in that they allow or deny a specified user/group an access privilege. Just when we thought we could forget the panacea of repairing permissions on our Home folder, here’s another reason that you could experience permission-related problems. They also explain why doing anything with special folders isn’t straightforward.
In the case of ACLs on your Home folder, they could cause normal operations like creating or deleting a custom folder to go wrong. You’ll also find this propagates to all your standard folders within that, such as Documents, but not to the folders you’ve created inside those.īefore you wonder what this has to do with you, like all access controls, sometimes they get fiddled with or go wrong and stop working in the way that you expect. In this case, it prevents those in the everyone group from deleting that directory, which is handy protection for a Home folder to have. Where that second line is the ACE (Access Control Entry) in its ACL. To discover the additional restrictions placed on your Home folder, you’ll need to use a command likeĭrwxr-xr-x+ 106 hoakley staff 3392 10 Feb 14:59 /Users/hoakley Only the Finder can’t tell you any more than that. You probably haven’t noticed it, but custom access is relatively recent, and indicates that, in addition to regular POSIX permissions, access to your Home folder is controlled by an ACL. In the lowermost section Sharing & Permissions, it should state that you have “custom access”, while confirming that you have Read & Write privileges. Select your Home folder, for example, and Get Info on it. For those we have to turn to ACLs, Access Control Lists, which have been supported in OS X since 10.4, but have been little used until recently. That lacks control over important subtleties, which could limit who can list folder contents, change extended attributes, permissions and ownership. Each file and directory has settings for its owner, group, and everyone else, which determine whether they can read, write or (where appropriate) execute that item. Regular POSIX (Unix) permissions are crude controls.
0 kommentar(er)
