1. Forum
  2. Usenet
  3. COMP.SYS.MAC.SYSTEM

  • New users and file permissions...

    From TDH1978@21:1/5 to All on Thu Jun 22 18:51:42 2023
    I recently created a second user account for a friend on my 2023 M2
    MacBook Pro (macOS Ventura 13.3.1). I was surprised to find out that,
    by default, my friend had (read-only) access to all my private files in
    my home directory.

    I want all files under my home directory to be visible only to me. On UNIX/Linux I would have just cd'd to my home directory and run a
    recursive chmod command. What is the appropriate way of doing
    something similar on macOS? I am hesitant to mypass the macOS
    interface and run commands directly in Terminal.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From TDH1978@21:1/5 to Alan on Thu Jun 22 19:37:40 2023
    On 2023-06-22 23:28:27 +0000, Alan said:

    Looking at my own and other user folders on my Mac, while files at the
    top level of my home folder would be available to read, the folders
    where my files are normally kept (Pictures, Desktop, Documents,
    Downloads, Library, Movies, Music) are all "No access" for "Everyone".

    There is a UI for changing file permissions in the "Get Info" window
    you can open for any file or folder.

    What's more, you can propagate permissions you set downward if you
    wish. There may be parts of your home folder where you want to apply propagation with care.

    Yes, but I need "no access" for members of the staff group. When I
    created the account, my friend was, by default, added to the staff
    group.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan@21:1/5 to All on Thu Jun 22 16:28:27 2023
    On 2023-06-22 15:51, TDH1978 wrote:
    I recently created a second user account for a friend on my 2023 M2
    MacBook Pro (macOS Ventura 13.3.1).  I was surprised to find out that,
    by default, my friend had (read-only) access to all my private files in
    my home directory.

    I want all files under my home directory to be visible only to me.  On UNIX/Linux I would have just cd'd to my home directory and run a
    recursive chmod command.  What is the appropriate way of doing something similar on macOS?  I am hesitant to mypass the macOS interface and run commands directly in Terminal.


    Looking at my own and other user folders on my Mac, while files at the
    top level of my home folder would be available to read, the folders
    where my files are normally kept (Pictures, Desktop, Documents,
    Downloads, Library, Movies, Music) are all "No access" for "Everyone".

    There is a UI for changing file permissions in the "Get Info" window you
    can open for any file or folder.

    What's more, you can propagate permissions you set downward if you wish.
    There may be parts of your home folder where you want to apply
    propagation with care.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to [email protected] on Thu Jun 22 19:16:09 2023
    In article <u72j9u$3eiq0$[email protected]>, TDH1978 <[email protected]> wrote:

    I recently created a second user account for a friend on my 2023 M2
    MacBook Pro (macOS Ventura 13.3.1). I was surprised to find out that,
    by default, my friend had (read-only) access to all my private files in
    my home directory.

    I want all files under my home directory to be visible only to me. On UNIX/Linux I would have just cd'd to my home directory and run a
    recursive chmod command. What is the appropriate way of doing
    something similar on macOS? I am hesitant to mypass the macOS
    interface and run commands directly in Terminal.

    select your home folder, go to the file menu, choose get info and
    change permissions as desired (at the bottom of the panel).

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to [email protected] on Thu Jun 22 19:46:09 2023
    In article <u72m04$3eu4v$[email protected]>, TDH1978 <[email protected]> wrote:

    Yes, but I need "no access" for members of the staff group. When I
    created the account, my friend was, by default, added to the staff
    group.

    change that.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From TDH1978@21:1/5 to nospam on Thu Jun 22 19:25:12 2023
    On 2023-06-22 23:16:09 +0000, nospam said:

    select your home folder, go to the file menu, choose get info and
    change permissions as desired (at the bottom of the panel).

    That does not seem to give me the options that I need, which are:

    me (read & write)
    staff (no access)
    everyone (no access)


    There is no "no access" option for staff.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)