Changed permissions for a folder and items - now can't delete or open
Hello
I was recently playing around with the Get Info button when right clicking on a folder or icon. I was trying to lock the folder so it could not be accessed (except with a password). I ended up locking it with the check box, then changing the privileges to No Access at the bottom under Ownership and Permissions and Details (all drop down menus were set to No Access). Also, now the checkbox is greyed out, so I can't uncheck it...
I was working on an external drive and then transferred the folder to my G5. However, while I can access the folder, I can not open the items I locked down. I also can not delete the folder and I keep getting "You Do not have sufficient privileges". I tried switching the Owner back to my own name (since it got set somehow to System), but after clicking the little lock and entering my password, it says "The operation could not be completed...An unexpected error occured (error code 120)".
Basically, how can I delete this folder or move it to the trash? And also, is there any good way to lock down folders so you need a password to get in?
Thank you
Chris
Deleting sandvox does not delete the customizations like udfs, forms. The actions that you perform in sandbox results in creation of the same in OIM db and also in metadata db.
As a solution of the problem you can try creating a new sandbox and then create new versions of the application instance forms. Once done navigate the application instance and assign the newly created application instance form. This might work and you can ignore the earlier forms.
Similar Messages
-
Solved - How to take ownership and change permissions for blocked files and folders in Powershell
Hello,
I was trying to take ownership & fix permissions on Home Folder/My Documents structures, I ran into the common problem in PowerShell where Set-Acl & Get-Acl return access denied errors. The error occurs because the Administrators have been removed from
file permissions and do not have ownership of the files,folders/directories. (Assuming all other permissions like SeTakeOwnershipPrivilege have been enabled.
I was not able to find any information about someone successfully using native PS to resolve the issue. As I was able to solve the issues surrounding Get-Acl & Set-Acl, I wanted to share the result for those still looking for an answer.
Question: How do you use only Powershell take ownership and reset permissions for files or folders you do not have permissions or ownership of?
Problem:
Using the default function calls to the object fail for a folder that the administrative account does not have permissions or file ownership. You get the following error for Get-Acl:
PS C:\> Get-Acl -path F:\testpath\locked
Get-Acl : Attempted to perform an unauthorized operation.
+ get-acl <<<< -path F:\testpath\locked
+ CategoryInfo : NotSpecified: (:) [Get-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.GetAclCommand
If you create a new ACL and attempt to apply it using Set-Acl, you get:
PS C:\> Set-Acl -path F:\testpath\locked -AclObject $DirAcl
Set-Acl : Attempted to perform an unauthorized operation.
At line:1 char:8
+ Set-Acl <<<< -path "F:\testpath\locked" -AclObject $DirAcl
+ CategoryInfo : PermissionDenied: (F:\testpath\locked:String) [Set-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.SetAclCommand
Use of other functions like .GetAccessControl will result in a similar error: "Attempted to perform an unauthorized operation."
How do you replace owner on all subcontainers and objects in Powershell with resorting to external applications like takeown, icacls, Windows Explorer GUI, etc.?
TonyHello,
Last, here is the script I used to reset permissions on the "My Documents" tree structure that admins did not have access to:
Example: Powershell script to parse a directory of User-owned "My Document" redirection folders and reset permissions.
#Script to Reset MyDocuments Folder permissions
$domainName = ([ADSI]'').name
Import-Module "PSCX" -ErrorAction Stop
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeRestorePrivilege", $true) #Necessary to set Owner Permissions
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeBackupPrivilege", $true) #Necessary to bypass Traverse Checking
#Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeSecurityPrivilege", $true) #Optional if you want to manage auditing (SACL) on the objects
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeTakeOwnershipPrivilege", $true) #Necessary to override FilePermissions & take Ownership
$Directorypath = "F:\Userpath" #locked user folders exist under here
$LockedDirs = Get-ChildItem $Directorypath -force #get all of the locked directories.
Foreach ($Locked in $LockedDirs) {
Write-Host "Resetting Permissions for "$Locked.Fullname
#######Take Ownership of the root directory
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
$Locked.SetAccessControl($blankdirAcl)
###################### Setup & apply correct folder permissions to the root user folder
#Using recommendation from Ned Pyle's Ask Directory Services blog:
#Automatic creation of user folders for home, roaming profile and redirected folders.
$inherit = [system.security.accesscontrol.InheritanceFlags]"ContainerInherit, ObjectInherit"
$propagation = [system.security.accesscontrol.PropagationFlags]"None"
$fullrights = [System.Security.AccessControl.FileSystemRights]"FullControl"
$allowrights = [System.Security.AccessControl.AccessControlType]"Allow"
$DirACL = New-Object System.Security.AccessControl.DirectorySecurity
#Administrators: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators",$fullrights, $inherit, $propagation, "Allow")))
#System: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("NT AUTHORITY\SYSTEM",$fullrights, $inherit, $propagation, "Allow")))
#Creator Owner: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("CREATOR OWNER",$fullrights, $inherit, $propagation, "Allow")))
#Useraccount: Full Control (ideally I would error check the existance of the user account in AD)
#$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked.name",$fullrights, $inherit, $propagation, "Allow")))
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked",$fullrights, $inherit, $propagation, "Allow")))
#Remove Inheritance from the root user folder
$DirACL.SetAccessRuleProtection($True, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#Set permissions on User Directory
Set-Acl -aclObject $DirACL -path $Locked.Fullname
Write-Host "commencer" -NoNewLine
##############Restore admin access & then restore file/folder inheritance on all subitems
#create a template ACL with inheritance re-enabled; this will be stamped on each subitem to re-establish the file structure with inherited ACLs only.
#$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked.name") #ideally I would error check this.
$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked") #ideally I would error check this.
$subFileACL = New-Object System.Security.AccessControl.FileSecurity
$subDirACL = New-Object System.Security.AccessControl.DirectorySecurity
$subFileACL.SetOwner($NewOwner)
$subDirACL.SetOwner($NewOwner)
######## Enable inheritance ($False) and not copy of parent ACLs ($False)
$subFileACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
$subDirACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#####loop through subitems
$subdirs = Get-ChildItem -path $Locked.Fullname -force -recurse #force is necessary to get hidden files/folders
foreach ($subitem in $subdirs) {
#take ownership to insure ability to change permissions
#Then set desired ACL
if ($subitem.Attributes -match "Directory") {
# New, blank Directory ACL with only Owner set
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankdirAcl)
#At this point, Administrators have the ability to change the directory permissions
Set-Acl -aclObject $subDirACL -path $subitem.Fullname -ErrorAction Stop
} Else {
# New, blank File ACL with only Owner set
$blankfileAcl = New-Object System.Security.AccessControl.FileSecurity
$blankfileAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankfileAcl)
#At this point, Administrators have the ability to change the file permissions
Set-Acl -aclObject $subFileACL -path $subitem.Fullname -ErrorAction Stop
Write-Host "." -NoNewline
Write-Host "fin."
Write-Host "Script Complete."
I hope you find this useful.
Thank you,
Tony
Final Thought: There are great non-PS tools like
Set-Acl and takeown which are external to PS & can also do the job wonderfully. It may be much simpler to call those tools than recreate the wheel in pure
code. Feel free to use whatever best suits your time, scope & cost. -
A password has been stored for a site and I now want to delete it
When I click on Options Security Stored Passwords the list is blank and neither the site nor the password stored for are shown.
Given this, any advice on how can I delete the password would be greatly appreciated. Would re-installing Firefox do the trick?
RegardsDetails like websites remembering you (log you in automatically) are stored in a cookie.
So if how have placed a tick in a box on a website can delete such a cookie.
*http://kb.mozillazine.org/Cookies
*https://support.mozilla.org/kb/Deleting+cookies -
I deleted my Apple ID on my Mac and iPad now can't delete on iPhone
My Apple ID was an email address I no longer use so I decided to delete it and create a new on. It worked fine in my Mac and my iPad, but it won't let me delete on my iPhone. Now I have no access to iCloud for my iPhone sync data with the cloud. When I try to sign into iCloud on my iPhone my password no longer works and for security question on birthdate it says my birthdate is wrong!
Anyone know how to fix this?If the old ID is yours, and if your new ID was created by editing the details of this old ID (rather than being an entirely new ID), go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You can now use your current password to turn off Find My iDevice, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll. When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.
-
I had to re-install the HD on my Mac Book Pro. I used a Time Machine back-up for all the apps and files. Most were restored, However, I cannot unlock a number of them. I tried changing the permissions using Get info but it is not working. I am using the latest version of Moutain Lion OSX.
Linc:
Very helpful suggestion and response, Thanks for pointing out that it is a permission issue. I am working through the issue and resolving my problem. -
Itunes was working earlier and now I receive message that says "the folder "itunes" is on a locked disk or you not have write permissions for this folder" - what is this and how can I fix the problem?
Hey HaydenJulie,
Thanks for the question, and welcome to Apple Support Communities.
The following article provides information on permissions issues with iTunes. The troubleshooting steps included may resolve your issue:
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/TS1277
Thanks,
Matt M. -
I am trying to open iTunes on my mac. But a box pops up saying "The folder iTunes is on a locked disk or you do not have write permissions for this folder". Anyone know what that means? I've had my computer 2 years and its never had a problem opening it
I've already right-clicked on the application, clicked "get info", and changed it so all people listed in the "Sharing & Permissions" section have the "read & write" privilage.
The error message is referring to your iTunes library, not your iTunes application.
You need to check and fix the permissions of the iTunes folder in your iTunes library. This is by default located in your "Music" folder.
Select the folder Music > iTunes in the Finder, right click on it or Ctrl Click and click "Get Info". At the bottom of the contextual window thatwill pop up, disclose the Sharing and Permissions brick, change your status from Read only to Read & Write. You may need to click the padlock icon to make changes. -
Wanted to sync up my new IPhone4, and thought that I should make sure I had the most up to date version of ITunes on my desktop first. Tried to get on site, and got an error message saying; "The folder ITunes is on a locked disk or you do not have write permissions for this folder." Cannot get on ITunes at all now. Help! Thx.
In my case its a new computer the old one was stolen and the time machine disk did not work for a restore but did for copying the info to the new mac
-
when i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes
Hi lvdmerwe!
I have two articles here for you that should be able to help you troubleshoot this issue further:
Trouble adding music to iTunes library or importing audio CD
http://support.apple.com/kb/ts1387
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/ts1277
Take care, and thanks for visiting the Apple Support Communities.
-Braden -
I got a message saying that the batteries were low, so changed them for new ones and now the keyboard cannot be 'found'. There seems to be no way to turn it on and make it 'discoverable' to the system. At the moment I'm typing this on a spare keyboard plugged into the back of my mac via a USB. Please help!
Have you checked to make sure the batteries are inserted the correct way? Have you tried to turn it on by pushing the right upper (round) edge of the keyboard - if you do that, do you see a tiny little green light? Since you have a wired keyboard, can you get to the Bluetooth setup/preference pane so you can manually try to sync the keyboard?
PS - posting duplicate posts is not helpful - it makes things too confusing, so I've asked the hosts to remove your other (identical) post. -
After downloading IOS5, i can't access my itune and receive the following message "The Folder "Itune" is on locked disk or you do not have write permissions for this folder", noting that i access this folder in a normal way. Any clue ?
In my case its a new computer the old one was stolen and the time machine disk did not work for a restore but did for copying the info to the new mac
-
Permissions for Applications folder
I think that my permissions in the Applications folder are not right. I first noticed this when trying to upgrade/update software. In the past, I've just dragged and dropped the new software to the folder, where it replaces the old software. I get a dialog asking if I want to replace the item, I say yes, and that's that. Now, I get the dialog asking if I want to replace, but it is followed by a message saying that I don't have sufficient permissions.
I can manually drag the old item to the trash and delete it, then drag the new item into the folder. This makes no sense to me and I would like to be able to just replace the old with the new as I did before.
Checking the permissions with Get Info I see that I am designated as one of two "everyone" groups and I have "custom access". All of the items within Applications shows 4 groups/names:
everyone (custom)
system (read write)
admin (read write)
everyone (read only)
Yes, there are two "everyone" with different settings. I haven't figured out how to tell what the custom settings are, but there is a notation that "You have custom access".
I have tried manually resetting permissions for the entire folder. That didn't work. It appeared to be changing permissions, but nothing actually changed.
I tried logging in as root, but found that even there I could not delete any names/groups or change permissions for items in the Applications folder.
Questions:
Shouldn't I have full access to everything as root?
How do I change permissions for items in Applications so that I can replace them without having to manually drag items to trash then manually drag the replacement into the folder?
When did Mac's permissioning become as arcane and convoluted as Windows?
Sorry, ignore that last one. This has been a very frustrating journey for me.Thank you! That worked. Here's the report:
I issued the Terminal commands you suggested in the other thread you linked to.
I then ran Disk Utility's Repair Permissions. It took about 30 minutes and returned 799,331 legitimate permissions errors, which it fixed. All were in the Applications folder.
I ran Disk Utility again and got no permissions errors. I did get some ACL errors in:
ACL found but not expected on "private/var/root/Library/Preferences".
ACL found but not expected on "private/var/root/Library".
ACL found but not expected on "private/var/root".
ACL found but not expected on "Applications/Utilities/Disk Utility.app/Contents/Frameworks/DUSupport.framework/Versions/Current".
ACL found but not expected on "Applications/Utilities/Disk Utility.app/Contents/Frameworks/DUSupport.framework/Resources".
ACL found but not expected on "Applications/Utilities/Disk Utility.app/Contents/Frameworks/DUSupport.framework/DUSupport".
ACL found but not expected on "Applications/Utilities/Disk Utility.app/Contents/Frameworks/DUSupport.framework/CodeResources".
ACL found but not expected on "Applications/AppleScript/Example Scripts".
ACL found but not expected on "Applications/QuickTime Player.app/Contents/Frameworks/DotMacKit.framework/Versions/Current".
ACL found but not expected on "Applications/QuickTime Player.app/Contents/Frameworks/DotMacKit.framework/Resources".
ACL found but not expected on "Applications/QuickTime Player.app/Contents/Frameworks/DotMacKit.framework/DotMacKit".
ACL found but not expected on "Applications/QuickTime Player.app/Contents/Frameworks/DotMacKit.framework/CodeResources".
ACL found but not expected on "Applications/iTunes.app/Contents/Frameworks/iPodUpdater.framework/Versions/Cur rent".
ACL found but not expected on "Applications/iTunes.app/Contents/Frameworks/iPodUpdater.framework/Resources".
ACL found but not expected on "Applications/iTunes.app/Contents/Frameworks/iPodUpdater.framework/iPodUpdater" .
ACL found but not expected on "Applications/iTunes.app/Contents/Frameworks/iPodUpdater.framework/CodeResource s". -
Boot loop after changing permissions for /applications directory
Hi there,
i have an imac with leopard OS. After a program install complained about missing priviliges for /applications directory
i adjusted the permissions for this folder. I changed admin user right from read to read/write and added another user, also with read/write rights.
After applying the permissions (including subdirectories) i rebooted.
Now the mac doesn`t come up anymore. It boots, shows the apple and the turning wheel and after 3-5 minutes boots again in a loop.
Any ideas highly aprreciated....
thxAttempt to reboot in Safe Mode then try restarting normally.
-
I installed Ff4 on my iMac soon after it came out. Then after serious problems developed with using Ff3.5.2 on my two Mac laptops (after Apple software upgrades Ff started kicking me off many sites whenever I tried to open something within a site, as I need to do for my work), I wanted to upgrade them to Ff4. I have downloaded it repeated times. The download is OK, but when I try to drag the icon into the apps folder it asks if I want to replace the older version. When I say yes, I get a message that say the operation cannot be completed because I don't have permissions for some of the items. That's where I am.
* Download a new copy of the Firefox program.
* Firefox 4.0: http://www.mozilla.com/en-US/firefox/all.html
* Firefox 3.6: http://www.mozilla.com/en-US/firefox/all-older.html
* Trash the current Firefox application to do a clean (re-)install.
* Install the new version that you have downloaded.
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data. -
I have unintalled and reinstalled several times, just suddenly stopped working. I have windows 7, have for awhile. I get the following message: The Folder I tunes is on a locked disk or you do not have write permissions for this folder"
I had an existing account that i am no longer able to access.
I got one email suggesting right click and run as program administrator, tried it and did not work. Also went into permissions folder and ensured was listed as program administrator.
Help and Thanks in advance.Hi Chris,
I apologize, I'm a bit unclear on the exact nature of your issue. When you say a "different server", if you mean that you recently changed the location where iTunes was storing its files (local or otherwise), you may find the following article helpful:
iTunes for Windows: Moving your iTunes Media folder
http://support.apple.com/kb/ht1364
Regards,
- Brenden
Maybe you are looking for
-
How to use a parameter in an Execute SQL Tasks in SSDT executed against Netezza
Good Evening, How can I pass a parameter in an Execute SQL Tasks in SSDT executed against Netezza? Below are my settings and error message. [Execute SQL Task] Error: Executing the query ""TRUNCATE TABLE" ?"_POC..JOHN_TEST"" failed with the following
-
IDVD won't open after trying to open a project that had missing links
I hope I can explain this correctly. I created a DVD using iDVD last week, it had many short movies on it in different menus plus some photos in the menu areas. After I created the DVD & burned it, I moved the videos (plus a ton of other clips from t
-
Can't open downloaded app due "unknown publisher"
I can't open a downloaded app because of an "unknow publisher"
-
I sat out 10.6.5 because it would cause a Kernel Panic soon after I slept the computer, or thereafter after every startup. Unfortunately, 10.6.6 is showing the exact same problem. The machine will start, and run normally, then after 2 minutes, or 10
-
X4200 M2 main system power goes out even with UPS
Hi, I was curious of which direction I should go to find out why when we get a brown out/black out the main system goes down immediately but the power lights blink and it appears to be on to some degree. I thought the UPS wasn't sufficient to sustain