WebDAV & File permissions
Hi,
I have setup my webserever to all access via WebDAV. I have setup the realms and have added users from opendirectory for authoring permission. All files are owned by root & admin with RWXRWXR_X permissions.
The authoring does not seem to be working as users can create but cannot amend.
Do I need to setup ACL's for this to work?
Thanks
Phil
The realm needs to be given owner:group www:www
-david
Similar Messages
-
File permissions when copied from server
When a user connects to a share and copies items to their own local desktop, should the permissions on the files stick with them once copied, or should the file permissions be inherited from the location they were copied to?
Server: OS X Server 10.5.x
Client: OS X 10.5.xTry this you say you are not using ACL's
Good but wait for it
Enable ACL to the disk, Do not set ACL permissions
See what happens -
How do I stop DW CS6 randomly changing file permissions via FTP?
How do I stop Dreamweaver CS6 12.0.1.5842 randomly changing file permissions when it uploads files to my web server via FTP.
I can no longer trust Dreamweaver to upload websites correctly as it changes permissions on some files which then deny the server access to the file which in turn makes the webpage unreachable/return a 403 error.
This is driving me insane.
I'm using an early 2011 Macbook Pro 10.7.5.Hi,
I'm having this problem too. Has Adobe fixed the issue yet? This appears to be an Adobe problem, not all the web hosts out there. CS6 is ramdomly (meaning: not every time) changing permissions on files uploaded with it and is not usable for web work until this problem is fixed by Adobe or a solution is provided. If I wanted to use a separate FTP program I would not have recommended that my employer buy multiple Adobe CS6 product licenses. One of the primary appeals of DW is the integration of FTP into the workflow.
I am using a destop iMac2.8 GHz Intel Core 2 Duo, 4 gigs of 800 MHz DDR2 SDRAM.
OSX 10.7.5
I am using DW Version 12 Build: 5808
Dreamweaver CS4 that I was using until this new purchase was working just fine. No file permisssion changes. I am being forced to go back to using it until Adobe posts a fix for this.
I should ask while I'm here: has anyone found a solution for this yet?
Thanks,
-c- -
How can I repair file permissions?
Greetings!
Recently I get this warning when I do a File Permissions Repair with help of Distools:
`Warning: SUID File `System/Library/CoreServices/RemoteManagement/ARDagentApp/Contents/MacOS/ARDage nt` is changed and cannot be repaired.
I did a few attempts to repair this file permission by hand and also used Onyx to repair this but when my Mac had a restart are the permissions again change to `only read` and do I get the same Warning.
Shall I just let it be? Or what can I do to change this?
With kind regards,
SilviaThat warning is on this list http://support.apple.com/kb/TS1448 and as per Apple can be safely ignored.
Stefan -
Whenever I copy a file to the time capsule (either via finder by moving it there, or via terminal with cp) the file permissions of the file end up with -rwxrwxrwx, independently whether the file was an executable, or whether it only had reading permissions for all or group. Running chmod on the Time Capsule files has no effect.
This is really silly and makes the Airport Disk sharing useless. This way I will never share files with my friends over the Airport disk because the files loose their property and all files are executables at the end.
Is there a way to mount or configure the Time Capsule so that it conserves the file permissions?
I am aware that time capsule cannot handle different users, but at least it should conserve the file permissions. I imagine it could be like a scp or ftp of files to another server. My files on the other server will not have my user name, but at least they conserve the file permissions. A -rw-r-r- file will still be a -rw-r-r- file even if I copy it 10 times from one server to another.
I would lik to encourage Apple to take this problem seriously and provide an update for this issue. So many other Apple products are just so well integrated in a networking environment, even if it is a heterogeneous one, but not Time Capsule with this flaw.
Best wishes,
RetoAgree, this is a serious flaw, that makes the device very dangerous to use as a central server for shared files, for example, the family's photograph collection. Since there appears to be no way to write protect anything, how can I ensure the files don't get modified or deleted?
Here's a nasty case I am seeing:
We unload a digital camera onto the TC's disk, then someone goes to their iPhoto app, and adds these files to their iPhoto library. Then they do something simple, like rotate the photos, and voila! The master file on the TC has now been modified! Horrible. -
How to set all file permissions to default?
So a few background notes are in order. I came across an article on the NSA's website titled Hardening Tips for Mac OS x 10.6 "Snow Leopard", needless to say I have come to believe I have made this irreversible. The NSA suggested to do some fancy command line coding to disable this, modify that, and change permissions to this. After hours spent on "hardening" my system, I have little hair left to pull in frustration. Is there any way to restore all file permissions back to default? I have used the Repair Disk Permissions, but that has done very little. To give the scope of what permissions have been skewed, I have observed several things:
The desktop wallpapers, on all Desktops (as I'm in Lion 10.7.3), start from the same picture every time. I have the wallpapers changing, randomly, every 5 minutes.
Safari doesn't keep the home page. No matter how often I try to change the homepage, I restart Safari, and I'm right back to the original homepage.
Firefox doesn't retain the fact that I want it to be the default Web Browser. In fact, it keeps "forgetting" that I've used it before, and thus brings me to their awesome start page whenever someone first uses Firefox.
Spotlight gets "stuck" i.e. almost every time I start my machine, it indexes. Even after I let it finish indexing, the next time I start my computer, it starts again.
I have to input the administrator password after almost every activity, such as copying to the desktop, moving an application not bought from the Mac App Store into the /Applications folder, deleting a file from anywhere inside my home folder, etc.
Some preference panes that need access to certain folders, such as Hazel's access to my desktop, are denied that access without ever prompting me for a password (though even if it did, it would get rather annoying after every startup)
My firewall (in System Preferences>Security & Privacy>Firewall) doesn't "remember" that I do indeed want Dropbox to accept incoming connections. I have to input my admin password at each startup after clicking "allow"
Opera pretty much doesn't function. Its bookmarking capability, home page, saved tabs, any thing that requires the saving of any type of preference to the computer results in a dialog pop up informing me that Opera failed to save what it needed, and prompts me to "Try again" or "Cancel" (hint: the "Try again" button doesn't work)
There are more symptoms of an ever growing problem.
I have backed up my machine from Time Machine, but I think it retains these file permissions, unless I'm wrong.
Summary:
How can I fully restore EVERY file permission back to default? Repair Disk Permissions doesn't work
Is there a way that I can re-install Mac OS X, restore through Time Machine, and achieve the default file permissions, essentially losing all file permissions?Repairing the permissions of a home folder in Lion is a complicated procedure. I don’t know of a simpler one that always works.
Launch the Terminal application by entering the first few letters of its name into a Spotlight search. Drag or copy – do not type – the following line into the window, then press return:
chmod -R -N ~
If you get an error message about permissions, enter this:
sudo !!
You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up.
Next, boot from your recovery partition by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the recovery desktop appears, select Utilities ▹ Terminal from the menu bar.
In the Terminal window, enter “resetpassword” (without the quotes) and press return. A Reset Password window opens.
Select your boot volume if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select ▹ Restart from the menu bar. -
Live Data / Problem with file permissions
Just trying out an old version of Dreamweaver MX 2004. I am
using my webhosting service for remote server/testing server
duties. It is running PHP 4.3.10 and MySQL 3.23.58. I was able to
set up the database connection and test-retrieve a recordset with
no problems. In following the tutorial I found that Livedata
wouldn't work, it just giving me a warning about file permissions
being wrong. It turns out that when Dreamweaver creates a temporary
file of the work-in-progress to upload to the remote server the
file is created on the server with owner=rw, group=rw, world=r
which explains why it won't run - group has to be set to group=r.
The file is created on the fly and then immediately deleted by
Dreamweaver so it is impossible to manually set the permission on
the server and probably fairly pointless too.
I tried just saving the file and previewing in the browser
which again causes it to be uploaded to the remote server. The
first time this resulted in the browser offering a file download
box instead of running the page. The reason is - again - that
Dreamweaver is setting the uploaded file permissions to include
group=rw. If I manually set the permission for group to group=r it
runs fine.
It turns out that Dreamweaver is always setting the file
permissions on file uploads (checked php and html) to the
remote/testing server to include group=rw. Once I set it manually
on the remote/testing server to group=r for a php file everything
is fine and subsequent uploads of the same file do not change it
again.
I checked with the webhosting company and their second-line
have reported back to me that the default file permission they set
on uploaded files includes group=r so it must be DW that is causing
the problem by setting group=rw the first time. I confirmed this by
using WS-FTP to upload the same file (renamed) to the same target
directory and the permissions set were owner=rw, group=r, world=r.
So
Can anyone please tell me how to change the permissions DW
sets on files written to a remote server because I have spent
countless hours on it without success. From looking at other posts
in this forum it could be that other users are hitting the same
kind of problem with DW8Stop using Live Data with a hosting account. Set up PHP and
MySQL locally on
your machine. That is how it's supposed to work. You
shouldn't test files on
the fly on a host as you write them. Change your test account
in DW to use
the local server. Upload your files to your remote server
after they are
fully tested.
Tom Muck
http://www.tom-muck.com/
"nigelssuk" <[email protected]> wrote in
message
news:[email protected]...
> Just trying out an old version of Dreamweaver MX 2004. I
am using my
> webhosting
> service for remote server/testing server duties. It is
running PHP 4.3.10
> and
> MySQL 3.23.58. I was able to set up the database
connection and
> test-retrieve a
> recordset with no problems. In following the tutorial I
found that
> Livedata
> wouldn't work, it just giving me a warning about file
permissions being
> wrong.
> It turns out that when Dreamweaver creates a temporary
file of the
> work-in-progress to upload to the remote server the file
is created on the
> server with owner=rw, group=rw, world=r which explains
why it won't run -
> group
> has to be set to group=r. The file is created on the fly
and then
> immediately
> deleted by Dreamweaver so it is impossible to manually
set the permission
> on
> the server and probably fairly pointless too.
>
> I tried just saving the file and previewing in the
browser which again
> causes
> it to be uploaded to the remote server. The first time
this resulted in
> the
> browser offering a file download box instead of running
the page. The
> reason is
> - again - that Dreamweaver is setting the uploaded file
permissions to
> include
> group=rw. If I manually set the permission for group to
group=r it runs
> fine.
>
> It turns out that Dreamweaver is always setting the file
permissions on
> file
> uploads (checked php and html) to the remote/testing
server to include
> group=rw. Once I set it manually on the remote/testing
server to group=r
> for a
> php file everything is fine and subsequent uploads of
the same file do not
> change it again.
>
> I checked with the webhosting company and their
second-line have reported
> back
> to me that the default file permission they set on
uploaded files includes
> group=r so it must be DW that is causing the problem by
setting group=rw
> the
> first time. I confirmed this by using WS-FTP to upload
the same file
> (renamed)
> to the same target directory and the permissions set
were owner=rw,
> group=r,
> world=r.
>
> So
>
> Can anyone please tell me how to change the permissions
DW sets on files
> written to a remote server because I have spent
countless hours on it
> without
> success. From looking at other posts in this forum it
could be that other
> users
> are hitting the same kind of problem with DW8
> -
Hello all,
I am making a simple HttpServlet, which takes input
from html page and saves in to a file, but I'm having a
bit of a problem with file permissions.
I'm getting the following exception
java.security.AccessControlException: access denied (java.io.FilePermission ./data/result read)
java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
java.security.AccessController.checkPermission(AccessController.java:427)
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
java.lang.SecurityManager.checkRead(SecurityManager.java:871)
java.io.File.exists(File.java:700)
SyksyHTTPServlet.doPost(SyksyHTTPServlet.java:31)
javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
sun.reflect.GeneratedMethodAccessor52.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:585)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:243)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:275)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:161)The exception seems to occur when I'm trying to check whether the file already
exists or not.
The data directory has all permissions (read, write and execute) set for all users,
and I have made an empty file called result inside the data directory for testing.
This file has read and write permissions enabled for all users.
Here's my code
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.Enumeration;
import java.util.List;
import java.util.ArrayList;
public class SyksyHTTPServlet extends HttpServlet
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
int totalCount = 0;
List list;
String song = request.getParameter("song");
PrintWriter out = response.getWriter();
File file = new File("./data/result");
if(file.exists()) // this is line 31, which seems to cause the exception
list = readFile(file);
else
file.createNewFile();
list = new ArrayList();
list.add(song);
writeFile(file, list);
for(int i = 0 ; i < list.size() ; i++)
out.println(list.get(i));
public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
doPost(request, response);
private List readFile(File file)
List list = null;
try
FileInputStream fis = new FileInputStream(file);
ObjectInputStream ois = new ObjectInputStream(fis);
list = (ArrayList)ois.readObject();
ois.close();
catch(Exception e)
e.printStackTrace();
return list;
private void writeFile(File file, List list)
try
FileOutputStream fos = new FileOutputStream(file);
ObjectOutputStream oos = new ObjectOutputStream(fos);
oos.writeObject(list);
oos.flush();
oos.close();
catch(Exception e)
e.printStackTrace();
}I'm using Tomcat 5.5 on Ubuntu Linux, if that has anything to do with this.
I'll appreciate all help.
kari-mattiHello again.
I'm still having problems with this. I made
a simple servlet that reads from and writes
to text file. The reading part work fine on my
computer, but the writing doesn't, not even
an exception is thrown if the file exists that
I'm trying to write to. If I try to create a new
file I'll get an exception about file permissions.
I also asked a friend of mine to try this same
servlet on his windows computer and it works
as it should.
Here's the code
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
public class ReadServlet extends HttpServlet
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
String s = "";
PrintWriter out = response.getWriter();
String docroot = getServletContext().getRealPath( "/" );
out.println("docroot: "+docroot);
File file = new File(docroot+"test.txt");
if(file.exists())
s = readFile(file);
out.println(s);
else
out.println("file not found");
//file.createNewFile(); // causes exception
//out.println("new file created.");
writeFile(file, "written by servlet");
out.println("Now look in the file "+file.getPath());
out.println("and see if it contains text 'written by servlet'");
public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
doPost(request, response);
private String readFile(File file)
FileInputStream fis = null;
BufferedInputStream bis = null;
DataInputStream dis = null;
String s = "";
try
fis = new FileInputStream(file);
bis = new BufferedInputStream(fis);
dis = new DataInputStream(bis);
s = dis.readLine();
fis.close();
bis.close();
dis.close();
catch(Exception e)
e.printStackTrace();
return s;
private void writeFile(File file, String s)
FileOutputStream fos = null;
BufferedOutputStream bos = null;
DataOutputStream dos = null;
try
fos = new FileOutputStream(file);
bos = new BufferedOutputStream(fos);
dos = new DataOutputStream(bos);
dos.writeChars(s);
fos.flush();
bos.flush();
dos.flush();
fos.close();
bos.close();
dos.close();
catch(Exception e)
e.printStackTrace();
}And if someone wants to test this servlet I can
give a war package.
Any advices?
kari-matti -
Installed Photoshop cc 2014 asks for serial # - corrupted Windows file permissions
More of a warning / heads up to all than a question - installing Photoshop cc 2014 [via the CC manager app] caused some Windows file (security) permissions to become corrupt corrupt on my system. Symptoms include cc2014 asking for serial number validation on startup (when, as a cloud version, it should not do so), then being unable to connect to the internet when you press the 'validate serial' button so getting that window into infinite loops, and - a real pain in the *** when trying to fix the above - causing abends of some windows shell functions that in turn cause windows explorer to crash and restart.
Anyhow, digging into this (fortunately, I am a long time Windows SysProg) I discovered that for reasons unknown, either the CC master app or the actual Photoshop cc2014 installer (or both) are changing file access control permissions on a number of files, mostly DLL's. Most of the files affected are in the (normally hidden) Program Data directory on the windows root disk, Some of them are in the Adobe subdirectory - so fair enough if they want to fool around with their own program - but others being changed are in the Common Files and Microsoft subdirectories. I cannot for the life of me figure out why this is necessary nor why Adobe feel the need to touch files that 'do not belong' to them - something dangerous in the extreme as an external app such as Windows Update might replace or 'repair' the files so touched, and if Adobe / CC are relying on file permissions on non-Adobe files, such changes could result in all manner of random and spurious problems / error messages occurring.
Anyhow, if, fellow Photoshop cc 2014 user, you get this happen to you then you can fix the file permissions by opening a console window [also called a "DOS box", or "command prompt" depending on your age and knowledge... 8-) ] and run the windows file checker with the command
"sfc /scannow". Make sure that you use 'run as administrator' to open the console window, or you'll get an error about sfc only being available to administrators. Also a very (very) sensible idea to close all non-essential running applications first to prevent any possibility of weird interactions happening.
Finally, check that the 'hosts' file in [root drive]:/Windows/System32/drivers/etc is valid - for some reason, it looks like the install tried to check or update this file (again, I have no idea why) but the result was a corrupted hosts file, which I assume is the root cause of the 'unable to connect to host' type internet error messages. Copy the file, rename it as 'hosts.txt' and edit it with notepad or wordpad. Look for lines containing garbage strings at the bottom of the file (any line that starts with a # ignore, it is a comment, and any line that has IP addresses or host names should be ignored - though if they reference a site such as "someserver.adobe.com" you might want to treat them with suspicion if you continue to get internet 'cant connect to site' type errors.
Anyhow, when I fixed these two sets of problems, Photoshop cc 2014 started 'right first time' without all the BS messages about serial numbers etc.
Hope this helps somebody out there in AdobeLand......
RickUpdate: I tried several times to reproduce the error, actually it dosen't occur. I changed nothing on my system, without reboot it twice. This is what I said in my beginning times: it occurs sometimes but often. I will keep you up to date.
-
Problem with file permissions in Windows shares
Due to a company merger we are now supporting a group of Macs in our PC environment. These Macs connect to our Windows shares. This generally works well, however we have discovered a problem. It’s to do with the way our Macs interact with our Windows shares. When they copy a file to a windows share they take the permissions for the file they copy from the route of the share rather than from the subfolder the files are copied to and write the file permissions accordingly.
This only affects admin users who use Macs with the ability to change file permissions. Everyone else inherits the permissions from the subfolder as they should because their account can’t change the permissions. If the route and subfolder permissions are the same then there is no change. If they are different, the Mac will use the share route permissions as preference.
We have shares where users don’t have access to the route folder but do have access to other folders. This is so that they can’t change the top level folder structure. However they are able to create folders and files under the top level folders. If an administrator uses a Mac, no one has access to any files or folders they create because users don’t have access to the route folder and this is copied to the files and folders they create. This doesn’t affect our PC’s only the Macs.
We are using the latest Mac OS fully updated and Windows 2008 server. Is this a normal Mac ‘Feature’? Is there a work around?I’m a bit disappointed by the lack of response to my problem. As Windows is the predominant file server in business, this problem must have occurred before.
Are Mac people really saying that Macs are not designed to connect to networks? At the moment our Macs are unusable apart from a few isolated tasks. Basically they are used by a few designers who work in isolation. If PC’s had this problem no one would buy them. -
Repairing permissions for “MacIntosh HD”
Determining correct file permissions.
Permissions differ on ./Library/Widgets, should be drwxr-xr-x , they are drwxrwxr-x
Owner and group corrected on ./Library/Widgets
Permissions corrected on ./Library/Widgets
Permissions differ on ./System/Library/User Template, should be drwx------ , they are drwxr-xr-x
Owner and group corrected on ./System/Library/User Template
Permissions corrected on ./System/Library/User Template
Group differs on ./usr/bin/fetchmail, should be 0, group is 6
Permissions differ on ./usr/bin/fetchmail, should be -rwxr-xr-x , they are -rwxr-sr-x
Owner and group corrected on ./usr/bin/fetchmail
Permissions corrected on ./usr/bin/fetchmail
Permissions differ on ./usr/lib/php/build/Makefile.global, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/Makefile.global
Permissions corrected on ./usr/lib/php/build/Makefile.global
Permissions differ on ./usr/lib/php/build/acinclude.m4, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/acinclude.m4
Permissions corrected on ./usr/lib/php/build/acinclude.m4
Permissions differ on ./usr/lib/php/build/mkdep.awk, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/mkdep.awk
Permissions corrected on ./usr/lib/php/build/mkdep.awk
Permissions differ on ./usr/lib/php/build/phpize.m4, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/phpize.m4
Permissions corrected on ./usr/lib/php/build/phpize.m4
Permissions differ on ./usr/lib/php/build/scan_makefile_in.awk, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/scan_makefile_in.awk
Permissions corrected on ./usr/lib/php/build/scan_makefile_in.awk
Permissions differ on ./usr/lib/system/libmathCommon.A.dylib, should be -r-xr-xr-x , they are -rwxr-xr-x
Owner and group corrected on ./usr/lib/system/libmathCommon.A.dylib
Permissions corrected on ./usr/lib/system/libmathCommon.A.dylib
Permissions differ on ./usr/libexec/dumpemacs, should be -r-sr-xr-x , they are -r-xr-xr-x
Owner and group corrected on ./usr/libexec/dumpemacs
Permissions corrected on ./usr/libexec/dumpemacs
Permissions repair complete
The privileges have been verified or repaired on the selected volume
Then I sometimes get the brown screen that states,You must re-start your computer.
I have already zeroed out the hard drive and re-installed Panther and the upgrade Tiger disc.
I repair permissions using the Tiger disc upgrade.
Can anyone help me with this??> I repair permissions using the Tiger disc upgrade.
One thing to note... When running Repair Disk Permissions, it is best to run it while started up normally, from your normal startup disk, not from a Mac OS X installation disc. The only time you should run it while started up from an installation disc is if some problem is preventing you from starting up normally. OTOH, Repair Disk can only be used when starting up from a different disk (such as an installation disc).
So, I would start up normally, run Disk Utility, and use Repair Disk Permissions on your normal startup disk.
NOTE: Repair Disk Permissions often gives alerts messages that can be ignored. They are more "informational," not serious errors.
http://support.apple.com/kb/TS1448
You should still run it periodically. When you run it, what needs to be repaired has been repaired; consider the rest of it an FYI. I've never experience a problem, where a Repair Disk Permissions message actually caused a problem. But, if you ever get an error while running Repair Disk (or Verify Disk), that is usually a serious problem. -
Setting the UNIX file permissions after writing the file to a directory
Hi Experts,
Can we set the UNIX file permissions after writing the file to a directory using Receiver File Adpater in SAP PI 7.1 ?
Thanks in Advance.
Regards,
JyotiHi
you can use the option "Run Operatiing system Command after File Processing" in the file adapter.
Thanks
Rinku Gangwani -
New computer + manual transfer of files = permissions mess!
Hello everyone,
Bear with me, my situation is lengthy to explain, possibly because I don't have the right words to describe it.
I've got a difficult situation I can't figure out. Let me start by saying, I don't know the Terminal very well, as I suspect that fixing my problem will definitely involve the Terminal. I know just enough to be dangerous (or to copy and paste!)
I had an old laptop running 10.6, and have a new laptop now running 10.8.4. Rather than use the Migration Assistant, I felt I wanted a clean start, a new user profile, etc, so I started from scratch. I should add that the new laptop has two internal drives, one that houses the OS, the other that is meant to store my (user generated) files. Also, for abbreviations' sake-- old computer, my username was called OldUser, and new computer my username is now NewUser.
I moved thousands of files on to my new computer's file storage volume (called "Data"), only to discover that any file I open, when I try to save, says this:
The document “example.rtf” could not be saved. The file is locked. Do you want to save your changes to it anyway? [Save Anyway] [Cancel]
There's also an accompanying tool tip that shows up next to the file's name (at the top of the open document) that says:
The document could not be autosaved. You don't have permission.
It doesn't matter what kind of document I open up, they all say this same thing.
All these troubled files reside here: /Volumes/Data/Old laptop files/Desktop. Files that are NOT in this directory, but are elsewher in the same volume "Data" behave just fine, (and no, just by adding a new file into the Old Laptop Files/Desktop directory doesn't "corrupt" it at this point.)
I have looked at the permissions of some of these troubled files, (File > Get Info) and discovered something I hadn't seen before. It looks like this:
everyone: Custom
NewUser: Read & Write
admin: Read & Write
everyone: Read & Write
The reason I say "I'd never seen it before" is because instead of the usual three categories, Owner/group/other, there's that fourth one at the top that says "custom."
The rest of the permissions, I set to "Read/Write" by recursively using the chmod command to set the file permissions to 777. (This is one command line trick I do know). But it didn't work!
At this point, I'm really stuck, because I lack the file permissions/command line vocabularly to even be able to google my question! Help?!
Thanks in advance for any tips/help!Back up all data. Don't continue unless you're sure you can restore from a backup, even if you're unable to log in.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
Triple-click the following line on this page to select it. Copy the selected text to the Clipboard (command-C):
{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -R $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password. Nothing will be displayed when you type it. You may get a one-time warning to be careful. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2 (optional)
Take this step only if you have trouble with Step 1 or if it doesn't solve the problem.
Boot into Recovery. When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
res
Press the tab key. The partial command you typed will automatically be completed to this:
resetpassword
Press return. A Reset Password window will open. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
▹ Restart
from the menu bar. -
Windows file permissions problems
We have an Xserve G5 that was running Server 10.3. I upgraded it directly to Server 10.5. Since then, I am having problems with some of our Windows users.
When they create a new folder, it puts them as the owner, but gives them NO rights. I am using ACLs to give full rights to the group that needs access, and also setting the POSIX group rights to read/write. So once they leave that folder, they can no longer get back in. I have SMB set to inherit rights from the parent, and the ACL is set to inherit as well. Other people in the group can access the folder, just not the owner! I change the owner permissions and all is well (for that folder at least). How do I need to set SMB so it follows the inheritance I set?
Once I have the folder set correctly, any new files created there have the POSIX group set to read only. The ACL inherits properly and still has full control. The owner is set correctly, usually. It is not consistent.
Once someone creates a file in any folder, if a Windows user modifies a file someone else created, it changes the owner name and gives them no rights. It also creates a new ACL record. If the original owner was a Mac user, it creates a new explicit ACL with all rights except execute and delete. If the file has ACL records already, it duplicates them and gives whatever rights it feels like (it seems). One new record may say Allow Delete only, and the next one say Allow Read except for execute. The only thing for certain is it will never match the original ACL. It always adds the new ACLs at the top of the list, and the duplicates are grayed out as if they were actually inherited that way. The most 'popular' file I've found so far had 128 "inherited" ACL records!
It is also denying access to some folders that the user has the correct permissions for. For instance, I can create/modify/delete files logged in on the Mac side, but when I log in on Windows, I have problems accessing files/folders. It shows everything as read only. Even if I change the properties in Windows, it will revert back to read-only when I apply the change.
We have a new Xserve that we will be moving the file services to. At that time, all the Windows users will be moved completely to the Mac side - currently the Windows users are accessing the Xserve and a Novell server.
Thanks in advance for any help.Hi Thy,
Based on my research, the Trusted Installer is a service, for those resources which only allow Trusted Installer to modify, neither Administrator nor System can modify them.
I am wondering that how secure the network and physical environment is that you need to create a GPO to prevent users making permissions changes on system files. These system files normally only can be modified by Administrators,
System or Trusted Installer, which is secure enough when we don’t add users we don’t trust enough to Administrators group.
>What is the best way to undo this while leaving the audit failures turned on and still retaining the correct permissions on all the files?
As long as administrators on these machines are qualified, you can remove the Group Policy. If not, please don’t make any user you don’t trust as Administrator.
>What happens to the files that aren't owned trustedinstalled than now have the trustedinstaller default permissions under system32 and syswow64 if I were to remove the gpo? What file permissions would be retained?
We should keep the default permissions, if those files weren’t owned by Trusted Installer before, we should change the original owner back, vice versa.
Here are some related articles below I suggest you refer to:
New ACLs Improve Security in Windows Vista
http://technet.microsoft.com/en-us/magazine/2007.06.acl.aspx
SYSK 277: How-To Bring Back the TrustedInstaller
http://blogs.msdn.com/b/irenak/archive/2007/01/30/sysk-277-how-to-bring-back-the-trustedinstaller.aspx
Best Regards,
Amy -
Preserving Current Owner file permissions using the copy function
I've been trying to use ARD 3's Copy function to overwrite a single user's Home folder in a classroom environment made up of a few Macs.
This is done with the aim of refreshing the Home folder every time a class is concluded.
However, although the Copy function works and succeeds in overwriting the Home folder, when the client is logged in locally, all the applications suffer from permission issues.
I've tried both the; Inherit from destination folder and; (ii) Preseve current owner, file permissions in the "Set item ownership to" option of the Copy window but neither appear to work.
I've also attempted to mirror the target user's account by creating the same account on the admin machine to push the Home folder over but the permissions remain a mess later.
Is there a way to get around this without having to implement lengthy UNIX commands?
I know of the existence of remote management apps, e.g. Deep Freeze (http://www.faronics.com/html/DFMac.asp), but under a budget constraint, such options are undesirable at the moment.
PowerBook G4 Mac OS X (10.4.3)Drag the photo from the iPhoto window to the desktop or export as kind = JPEG
As to too small - what is too small? The pixel dimensions of the exported JPEG will be identical to the original TIFF - the file size is smaller because JPEGs are compressed - which of course reduces file size - which of course is the reason that JPEG exists
LN
Maybe you are looking for
-
I recently lost wifi capabilities on my 3rd generation ipod touch. I reset the network which did nothing so I did a complete reset. This actually removed the Safari icon off my itouch and still wifi is completely grayed-out. Has Apple removed the
-
WLC 7.4.100.60 and roaming problems on 8500
Hello, After installing an 8500 controller on 7.4.100.60 and migrating 1000 APs do this controller, we have the following problems: [1] clients get disconnected and loose sessions (note: client is mobile gun and is heavily mobile). I have the impress
-
Application doesn't work after build
hi, My program doesn't work while running the.exe.It works fine in Labview develop enviroment but it fails running when i do the same in .exe . If i run my .exe file ,i will get always error like below (see attch..).i am using Driver for Spectrum An
-
Forms 6i, max size in image type item
Hi, anyone know what is the max size of an image item type in forms 6i ??, not in the blob table column in database. thank in advance regards Mauricio Fernández C.
-
Connect g4 powerbook to g5 power mac
I'm trying to connect my g4 powerbook on panther to my new g5 nothing happens it keeps telling me ethernet has failed no cable connected I bought a crossover cable. What I want to do is connect my g5 so I can use the internet connection on my g4 whic