Lion Permissions

I have a white macbook with lion installed for about 2 months. I was on a plane ride to Hawaii for school, and I tried opening Photoshop CS3, but I got an error about not having the right permissions to open it. I created another account (called test) and it opened fine. Today, I tried to fix it, and I accidentaly chaned my main user's (haven't changed it since I got my computer) UID to 502, the test's account UID. Now, the test and my main account are merged, and when I try to open System Preferences to try to change it back to 501, it crashes. I looked at other forum posts about deleting some com.apple.xxx. When I finally got to my Library folder open, I couldn't find any of the files to delete. I am wanting to know how to change back my UID to 501, with out using System Prefernces because it won't open. Thanks for all of your help!
-Nick

I may have some good news but I need some brave souls to test it out. I have run these commands and haven't had a single problem since!
The first command removes all ACLs from files in the home directory:
chmod -R -N ~
This command puts the necessary ACLs back where they belong:
chmod +a "everyone deny delete" ~/ ~/Desktop ~/Documents ~/Downloads ~/Library ~/Movies ~/Music ~/Pictures ~/Public
That's it. My problems disappeared. If this doesn't work or you are afraid of Terminal, I also ran across this in all my searching: http://www.fixkb.com/2011/08/reset-home-folder-permissions.html
Let me know if this works for you as well and if so, spread the good word!

Similar Messages

"Unrepairable" issue on start up with OS 10.7.5 Lion "Permissions"?

Hi. I have an early 2008 MacBook with 10.7.5 Lion OS. I installed Lion online.
I can't update to Maverick on this early version of MacBook to fix the following problem with the OS...
My chronic problem is with start up. I get white or black screen and start up stops there.
I have understood that the issue is with "Permissions, so I went into Disk Utility and First Aide and "repaired" Permissions, the first "Warning" I get is this:
"SUID file 'System/Library/CoreServices/Remote Management/ARDAgent.app/contents/MacOS/ARDAgent" has been modified and will not be repaired"
Will not be repaired?
Is there any way to repair this issue?
Thank You,
Shunyo Mahom

Thank you, Neil,
Your reply relieved a certain anxiety I'm having regarding the start up failures I'm expereincing.
I still just don't know what the cause is...
Shunyo

Mountain Lion Permissions changes

I just upgraded to Mountain Lion from Lion and am having some problems with permissions that I haven't run across before.
I took a screen shot that was deposited on my desktop as a png.
The permissions on the screenshot png while on the desktop were "you can read & write".
When I dragged the screenshot png to the finder I got a pop up that said "the screenshot ....can't be moved because macintosh hd can't be modified" with an "authenticate" button on the bottom of the popup screen.
When I typed in my password the png was deposited on the finder screen.
When I went to "get info" I found the permissions had changed to "you have custom access" from "you can read and write".
Then when I tried to move the png from the finder to the trash I got a popup that said "Finder wants to make changes. Type your password to allow this".
Any ideas as to what happened and what I can do so I don't have to keep typing in my password?
Thanks for your help,
Joim

Hi Linc,
Thanks for the information.
Apparently this was a change in Mountain Lion from Lion that I missed.
I've always been able to drag/drop files, etc. that I created onto the "Macintosh HD" screen with no problem and work with them, delete them or attach them to an email document without having to use my password. It'll take a bit of getting used to but I can manage.
Can you enlighten me as to the reason for this change?
Once again, thanks for your help,
Jim Coleman

Repair Lion permissions from Snow Leopard?

If I have an external drive with a clone of a Lion system on it, can I use a computer running Snow Leopard to repair permissions on it?
Thank you,
David

~Bee wrote:
David, if you had a 2012 Chevy, and you lost the computer program that ran the tuneup/automatic readings, would you go get another one from a 2011 Chevy, and think it was going to find the right stuff to fix? I have seen posting rom people who tried it, and things got so cofusing and messed up, a reinstall of the OS seemed the only way out.
Thank you for the added info. I will take your word that some people have done it with ill consequences. I am just trying to understand the mechanism by which that would result.
In answer to the question, "Should I start up from a Mac OS X install disc to repair disk permissions?" Apple says, "This is not necessary because Disk Utility looks at the receipts on the volume being checked" http://support.apple.com/kb/HT1452. That led me to think that it might not matter which system was invoking the repair, which was why I asked my question. In other words, does Disk Utility in ML or L run a different routine than in SL, or is it the same routine regardless of the system that Disk Utility is on? That is what I am trying to understand.
David

OS X 10.7 Lion Permissions

I've upgraded to OS X 10.7, and when I open downloaded documents, especially iWork docs, I constantly get the pop-up message "You don’t have permission to write to the folder that the file xxxxx". I asks if I want to Duplicate or Okay.
If I choose Duplicate, I get the error: “Unsaved Numbers Document.numbers” couldn’t be moved because you don’t have permission to access “Autosave Information”.
If I choose Okay, the original message just pops up again...over, and over, and over....
I've checked permissions and access on my Downloads, Desktop and all other folders. They are all set to Read & Write. I've verified and repaired Disk Permissions.
I'm at a loss; is anyone else experienceing this issue?

Try pasting these in Terminal:
sudo chown -R `id -un` ~
sudo chmod -R u+rwX ~
See if that fixes it up.

Lion and Snow Leopard on two partitions

Hi, just wondering if a guru can advise me on this/ I am running Lion on 450 GB partition of my 500GB internal drive with the other dedicated to SL. I upgraded the main partition a few weeks back. I use the smaller partition as my Disk Utility and Disk Warrior boot up disc.
I am not having any problems, Lion is flying along. Love it. But is it possible yet to repair Lion with Disk Warrior? Is it compatable if I wish to do a bit of a clean up of my system at some stage? And also would SN Disk Utility be able to repair Lions Permissions? I was going to keep SN on to run and third party ppc aps until I am all up to date for Lion, or would I just be better updating the back up boot disc to Lion as well?
Thanks for your time in advance
Keats

You need to get the 4.3 updater from Alsoft.
You can also create a recovery USB stick with
this:
http://support.apple.com/kb/DL1433
This is a good idea any way since hard drives can crash
or just get corrupted.

User Home Permissions

I have Snow Leopard Server installed on a macmini. I am unable to have my home directory created successfully on the local hard drive of my clients. All my clients except one are running the most up to date Snow Leopard, the one client that does not have Snow Leopard is a new macbook air running Lion 10.7.4. I have tried logging in with on both systems and receive the same results. It allows me to login with userA but the home directory is owned by root:wheel instead of userA:staff. Any other user on the server can login successfully with their home directories being owned by them and staff. It is only this one account that gives the below statement when logging in to a client computer.
The home folder for user "xxxxxxx" isn't located in the usual place or can't be accessed
Background:
The user id used to work and create the home directory on client machines
All other users except userA can log in successfully.
Network user accounts are setup to create home directory on the local client computer, not to use a shared home directory from the server
Gives error on both Snow Leopard and Lion clients
Have already tried deleting user in Work Group Manager and recreating the user with the same information except uid, still receive the same error
Already Saw after web search:
SOLUTION that worked for me:
1) Open the Terminal.app
2) Type this and then press return:
sudo xattr -d com.apple.FinderInfo /
(note: don't leave off the last space and "/" character before pressing return)
3) It should have asked for your password. Type it and press return.
4) Now do nothing else, except quit Terminal.app and then RESTART your computer (select "Restart" from the Apple menu)
But I need to know where on the Snow Leopard Server (file that handles the permissions creation of network users on client machine) and why (it only does this for that one particular user and suddenly just started this behavior out of no where)
Any help with this problem is greatly appreciated and Thank You all in advance.

To fix this issue, I had to do a restore on my Snow Leopard Server-(SLS) to the day before I bought the new Lion Client-(LC). What happened was defiantly incorrect permissions. I used the LC and Lion Server Admin Tools-(LSAT) from the app store to try and perform administrative task. When the LSAT asked for an administrative account to perform the task, I used my account and it binded with a couple of errors. What happen was the LSAT wrote Lion permissions to the SLS and Snow Leopard did not know how to interpret these new forms of permission set by Lion. So from that point on when I would go to a client and log in; it would authenticate against the SLS but the permissions was lost when the home folder was created on the client.
Problem:
Permission errors on home folder creation, on Snow Leopard and Lion Client locally.
What caused the problem:
Using Lion Server Admin Tools to administer admin task on the server
Fix:
Restore to the date or time before I tried to authenticate with Lion Server Admin Tools
What you can do:
I have successfully binded a Lion Client to the Snow Leopard Server without any more permissions errors
"JUST DO NOT use the Lion Server Admin Tools on a Snow Leopard Server"
Work Around:
If you need to perform admin task on a Snow Leopard Server from a Lion client, use screen share. This
works perfectly without altering the permissions of an users account.
Prayers:
Please let both Mountain Lion and Server be better than Lion period
Thanks to all who helped with this issue

Can't print .pdf files on windows network printer

Hi,
I cannot print .pdf files on Canon IRC printer with UFR II 2.23 or 2.24 drivers connected through a windows network by LDP protocol, either with Apple Preview or Acrobat Reader - looks like the software doesn't find the printer (I have the rainbow whell and the software does not answer). It can last for hours, there is no other solution than forcing the soft to quit and finding another way to print. I have updated Canon drivers from 2.23 to 2.24 (all supposed to work with Lion) and that does not fix the problem.
This problem does not happen with Ms Word or Safari (or, more generally, other types of files) and it worked fine with Snow Leo even with pdf!! I also have windows XP with Parallels and guess what? I can print through Parallels with Acrobat Reader (for windows XP) on the same printer on which I cannot print with my Mac with Lion and Preview or Acrobat Reader for Mac!
Please help !!
Alexis

Correction
It works with Acrobat but the printer does not like queues of documents...
The site privided me with the topics I fas looking for about this : it's a Canon drivers and Lion permissions problem.

MacBook Pro with SSD taking 5 minutes to start

I have a MBP that recently started taking 5-10 minutes to bootup.
Here are the symptoms - boots to grey apple screen and freezes (this occurs ater Verbose mode exits the terminal even, but before the login screen). After about 5 minutes, it goes to the login screen and continues as normal.
I have tried PRAM reset, SMC reset, reinstall of Mountain Lion, permissions whizjiggery, turning off icloud and removing all startup items....
Here are some relevant sections of a typical console log after startup showing some time gaps....
9/23/13 1:18:04.179 PM configd[21]: InterfaceNamer: timed out waiting for IOKit to quiesce
9/23/13 1:18:18.081 PM locationd[73]: NOTICE,Location icon should now be in state 2
9/23/13 1:18:20.082 PM locationd[73]: NOTICE,Location icon should now be in state 0
9/23/13 1:18:39.673 PM warmd[54]: [warmctl_evt_timer_bc_activation_timeout:286] BC activation bcstop timer fired!
9/23/13 1:19:06.583 PM distnoted[158]: # distnote server agent absolute time: 123.869373253 civil time: Mon Sep 23 13:19:06 2013 pid: 158 uid: 501 root: no
9/23/13 1:19:32.821 PM com.apple.SecurityServer[22]: Session 100005 created
9/23/13 1:19:32.822 PM com.apple.SecurityServer[22]: Session 100006 created
9/23/13 1:19:55.000 PM kernel[0]: Sandbox: sandboxd(174) deny mach-lookup com.apple.coresymbolicationd
9/23/13 1:22:09.000 PM kernel[0]: considerRebuildOfPrelinkedKernel prebuild rebuild has expired
9/23/13 1:22:11.274 PM hidd[76]: Timeout waiting for IOKit to be quiet
9/23/13 1:22:19.298 PM java[90]: __TCCAccessRequest_block_invoke_040: Connection invalid
9/23/13 1:23:08.648 PM WindowServer[108]: Unable to open IOHIDSystem (e00002bd)
9/23/13 1:23:08.000 PM kernel[0]: virtual bool IOHIDEventSystemUserClient::initWithTask(task_t, void *, UInt32): Client task not privileged to open IOHIDSystem for mapping memory (e00002c1)
9/23/13 1:23:08.680 PM loginwindow[72]: Login Window Started Security Agent
The other symptom I am experiencing on this MBP at this time is terrible airport connectivity, dropped packets, difficulty finding networks, etc
It is a 3rd party (OCD Vertex2) SSD that I have been using as a boot drive for over a year with no problems

Sounds like time for a PRAM reset. Here's how:
1. Power down the machine.
2. Locate the following keys on your keyboard in preparation for Step 4:
‘command’ – ‘option’ – ‘P’ – ‘R’
3. Press the ‘power on’ button.
4. Immediately – and before the grey screen appears – hold down ‘command-option-P-R’ all together.
5. Keep them held down until you’ve heard the start-up chime twice. After you release them you should hear it again, and hopefully your Mac will boot up as normal.

When i move something to the trash i have to enter an administrator password

After I installed Lion, I now have to enter an Administrator and password before the item is deleted.
Also, it never shows up in the trash after it is removed form the original folder.
Where are the files going that are deleted?

Well I found the answer in a different community.
The problem was that somehow when I loaded Lion, permissions were changed for my own trash folder.
The fix was to open the terminal and run the following command:
1. Fire up Terminal - located in your Applications/Utilities folder.
2. At the command prompt type the following exactly (just copy and paste it to ensure it's entered properly):
sudo rm -rf ~/.Trash
3. Hit Return. You'll be asked to enter your Admin password. Note that the cursor within the Terminal window will not move as you enter your password.
4. Hit Return
5. Restart your Mac or log out then back in again.
This information from: http://www.techradar.com/forum/archive/index.php?t-27211.html
All seems good now.

After Lion upgrade, unable to start any 3rd-party apps. Suspect it has something to do with the cache and permissions.

Dear Apple Support Community,
I am using a MacBook 15" (mid-2010) with Intel i7 2.66GHz.
Currently, I write to you via my sister's laptop as mine is unable to start-up Safari or any other web browser at the moment.
After a relatively smooth OS installation of OS X Lion, I noticed that my usual apps, Evernote, Twitter, Skype, and others, were not able to start-up at all (i.e. kept bouncing in place on the dock for what seemed like forever). I have since disabled their 'Open at Login' command and now start my MacBook up with no apps running. After restarting my computer countless times, I've realised that only selected native applications are able to open. Finder, Safari, App Store, iTunes, FaceTIme and most of the Utilities. Even on Finder, right-clicking is apparent blasphemy as the window freezes and the windmill pops up, and I am forced to relaunch Finder. Safari is only able to load simple web pages such as Google.
I have attached an excerpt of my Console for you guys (I could take a screenshot but dropbox could not even open to allow me to send it to my sister's laptop). As you can see, at every refresh, the same 5 messages appear, that a particular 'com.apple.launchd.peruser.501' keeps crashing. Correct me if I'm mistaken but this is probably the process handle for Launchpad. Although I am not sure whether this is the only reason for my computer's sluggishness post-Lion update, I would really like to eliminate this possibility.
Things I have tried:
Repairing Disk Permissions
Unfortunately, this yielded no positive results as it did not seem to rectify the problem. Subsequent reparations have produced the same log, hence I don't think it's working.
Waiting for Indexing to complete
Some people have cited that the reason behind the sluggishness could be due to the fact that Spotlight was indexing my hard drive for optimal search results. I have since waited 7 hours for the indexing to complete, but am still stuck with a computer that cannot even open Twitter.
Installing Onyx
Other forum users have said that it is possible that the computer's cache has been clogged up or something. I am not entirely sure what this means but I went to attempt to download the free product that most people have recommended. Although installation was a cinch, I was not able to even start Onyx. After 10 minutes, Lion just told me that the program had been unresponsive for too long and asked me whether I wished to kill it.
I am almost certain that the overarching problem could be erroneous sharing permissions. But then again, that is no reason for my computer to behave in such a snail-like manner. I would really appreciate if you guys could provide me with some sudo commands to use in the terminal or something that can fix the problems my computer is facing, after understanding the limitations that I currently face considering the state of my MacBook.
The fact that I am writing here on this forum is that I wish to do anything other than a full reinstallation of the OS that has caused me so much anxiety (Snow Leopard was just magical compared to this pile of sh*t, pardon my language). I just want to do everything I can before having to resort to such a barbaric act (I have a lot of applications but I don't know whether I am able to restore those using Time Machine as well).
In any case, thank you guys so much for reading all the way to the end. Help of any sort, be it sincere or condescending, will be fully appreciated. Please don't hesitate to ask for more information if I have not already provided it. As I am an average user, I may not be too familiar with jargon. So if getting the information requires complicated procedures, please provide a step-by-step.
Also, tl;dr: Updated from Snow Leopard to Lion, computer became slow and buggy, tried many things, didn't work, need help.
Thanks,
Nathan

Thanks for the quick advice!
Unfortunately, I am still unable to open my core productivity apps, namely Skype and Evernote. Twitter, as well, could not start. But interesting quick fix though, I never knew you could do that.
Here's the error log after the restart:
What else should I try?

Advise about setting up a permissons on Lion server for a small office.

What is the common wisdom and advise about setting up permissions optimally for a small office using OS X Lion Server as a file server? I thought I had this solved by setting the ACL permissions so that all users and appropriate groups can read and write all files on the server. This works great until a new file is created. Then it appears that the POSIX umask kicks in and takes priority over the ACL permissions. I need to allow group write permissions on all new files. My options seem to be:
Make everyone an admin - not great for obvious security reasons
Change the umask for the whole machine - also security problems, though perhaps fewer than the everyone-an-admin route above
Write a folder action applescript to add group write permission on all new files. This works fine if you have a static number of folders With new folders it has the problem: How do new folders created by non-admin users get this folder action automatically applied to them - some cronjob to hunt down the new folders; an applesscrpt folder action that adds a folder action to all new folders (sounds recursively complicated)?
Have a cron job regularly do something like `chmod -R 664` on all files. This will break during those between the cracks times between when someone creates a new file and when the cronjob runs - not ideal.
Seems like this should be easier which makes me think I'm missing something obvious.
Any help great appreciated. Thank you in advance!

Good-heart's advice is certainly your first step, but if you've already done that and still have the problem you've described, you might have the 10.7.3 ACL bug, particularly if your users and groups are in an OD or AD rather than being local accounts on the server. The problem is that ACL's for directory accounts are incorrectly ignored, resulting in POSIX permissions coming into play.
I've descibed my workaround for this here;
https://discussions.apple.com/message/18037703
I haven't yet tried the other trick I've read about, which is to ensure your Share's data directories are at least one level down on the volume - there is a post here on the Communities that mentions this;
https://discussions.apple.com/message/18028746
I seem to remember that this helped with an earlier version of AFP, if using external firewire or usb storage.
Let us know if you find a fix, it seems a number of people have problems with this.
Regards,
Ian

Problem with permissions in Aperture 2.4.1. after installing mountain lion, did repair permissions but it stop at 3/4 of the repair cycle? Does anyone know what to do, my library is 94gigs!

I tried all solutions to get my library permissions corrected, but nothing worked. Is this a known problem with ugrading to mountain lion for Aperture 2.4.1.? Does anyone have a new solution to get my library working again?
Thanks for any help.
Otto Muskee
Germany

I tried all solutions to get my library permissions corrected, but nothing worked. Is this a known problem with ugrading to mountain lion for Aperture 2.4.1.? Does anyone have a new solution to get my library working again?
Thanks for any help.
Otto Muskee
Germany

Can I get rid of my faulty disk permissions by upgrading to Lion?

I just replaced my hard drive for my MacBook. I took it to an Apple retail store, and they installed Snow Leopard. I restored the system to what I had on the previous hard drive (which had faulty disk permissions). I was told that the permissions were in error because of the failing hard drive. I even asked if I restored from my old hard drive if those faulty permissions would pop up. They said no, and that I could even uncheck the settings box on the transfer when I first started the computer. So I ran disk utility, and wa-la. Faulty disk permissions. If I upgrade to Lion, will it overwrite the system? Will my faulty disk permissions leave me in peace?

Check apple's list of permission errors you can safely ingore at http://support.apple.com/kb/ts1448
I had a few permission errors that Disk Utility always warned me 'could not be repaired" that had me thinking I had a serious problem - -turns out it wasn't such a big deal

Unable to change permissions on Hard Disk Drives after rolling back OSX Lion to Snow Leopard

Are you able to help me?
I had several problems with permissions and a series of other serious issues after upgrading to Lion, so I did a clean re-install of Snow Leopard 6.4 (from disk), upgraded to 6.8 and still had permissions problems which I have made worse by doing what I thought made sense - giving my administration user access to all hard disks and time machine back-ups. I emphasise "hard disks" because I have an iMac 27" i7 and 250GB Flash Drive provided by Apple where I keep OSX and aplication files. Thus the Flash Drive (FD) becomes the boot disk, not the Hard Drive.
Changing preferences on the Apple HD (not FD) and the Time Machine Backup HD to my user name (with administration privaleges) has had the reverse effect of not giving me access to anything other than my OSX system volume on my 250GB Flash drive! I can only see my files on the hard drives with the root user (which I have used for the first time ever to get that access). But using the root user does NOT allow me to change permissions of either my Time Machine backup disk or the Hard drive on my iMac ! Why oh why??
Googling for solutions suggested using iRepair to change permissions but that gives me a "boing" when I try with no effect - at least a "boing" is more feedback that the Apple Finder's response to my attempt to alter permissions in the "info" window!
Oh! and of course I have unsuccessfuly tried the Disk Utility as well, which does come back with errors - that appear to be "safe to ignore" from Apple Support's website!
I originally posted a slightly different message to this one to https://discussions.apple.com/message/16955471#16955471 because it appeared to have similar issues. It appears as if my problem is unfortunately quite unique!
Godfrey Bridger
Hamilton, New Zealand

So the background to this situation:
1. The user had OS 10.6.8 installed on one volume, while his actual users home folders stored on a second volume, this is fine but can sometimes cause issues during/post upgrade to 10.7
2. The user upgraded to 10.7 and while his home folders were still being accessed, he no longer had permission to change or modify them.
3. The user downgraded to 10.6.4 again which broke the link for his users completely.
4. In an attempt to change the permissions for his information he had the (common) mistake of changing the permissions of his root level of his drive, this did several things, in addition to negatively effecting his OS, it also locked the drive mount points in his (hidden) /Volumes/ folder.
5. the steps taken to help rectify this issue:
A. Open Terminal.
B. TYPE:
chmod -N /
chmod 1775 /
chown root:admin /
C. Reboot computer
D. Open Disk Utility.
E. Repair permissions on the boot volume.
F. Also the following commands were run on her second drive to allow him access to his stuff again:
sudo chflags -R nouchg /path to drive/
chmod -R 775 /path to drive/
chmod -RN /path to drive/
chown -R username:staff /path to drive/
Once the permissions repair is complete the Users can be readded to the System Preferences>Accounts pane and the paths to home directories located in his second drive using the "Advanced Options..." section, but due to the time the permissions repair was going to take this step will be posted tomorrow.
Also each user will require Terminal commands to make the permissions unique for each user: (this must be done PRIOR to the users being added in System Preferences>Accounts.
chmod -N /
chmod 1775 /
chown root:admin /
sudo chflags -R nouchg /path to home folder/
sudo chmod -R 775 /path to home folder/
sudo chmod -RN /path to home folder/
sudo chown -R username:staff /path to home folder/
EE

Lion Permissions

Similar Messages

Maybe you are looking for