Multi-user security & privacy

I understand that there have been discussions concerning security and privacy using the iPad. Many have described issues with multiple e-mail accounts. The reality is that many of the items, from Safari bookmarks to iBook (and other applications) selections also put the owner of those items at risk. How can we open a meaningful dialog with the iOS development team and Apple management to consider ways to strengthen personal security and privacy? My vote would be to (as fully as possible) mimic the multi-user ability of the Mac OSX itself. Granted, application developers would also have to develop their applications to play in that sandbox, and each "unique" user would eat up xxx mbytes of the available iPad.

http://www.apple.com/feedback/

Similar Messages

Time Capsule & NAS Multi-User Security Question

I want to know how time capsule manages multiple users backing up to the internal or USB drive attached to it. I understand that, in general, time machine uses all the drive's space, and just deletes the oldest backups, is this correct with the Time Capsule too? if so, how does every user get a fair share of the backup space? And if multiple users backup to the same drive (same Time Capsule), is there any security, or could someone just run the migration assistant to steal another user's data?
Oh, and if you backup to the drive attached to the capsule via USB, what do you see when you take that drive and plug it into your computer directly, is it like any time machine backup, or is it formated differently, like if there are multiple people backing up, is each person's backup stored in a password protected growing disk image or something? That would be great if it worked that way, where it would require a password to restore from the backup...

nobody?

Remote Management Multi-User security issue

Hello,
This issue concerns both Mountain Lion and Lion servers. If I'm not mistaken, the issue is also officially described by Apple in the Lion release about Remote Managemenr vs Screen Sharing features.
My question is simple and yet unanswered after hundreds of Internet searches:
Why on earth a non-Admin user has the right to Share and Control the screen of another (Admin) user being logged-in a (Mountain) Lion server? It looks like the trick is that "Remote Management" instead of "Screen Sharing" is active. So what? Why a non-Admin should be allowed at all to view another users desktop just by typing-in his/her own credentials?
Am I missing something or is Apple really out-of-security context? Our admin devoted significant effort to arrange access for the shared directories. For what? To find out that the Screen Sharing security under ARD Management (Remote Management) is non-existent?
Am I terribly wrong?
Any feedback will be highly appreciated.
D.

http://www.apple.com/feedback/

Security & Privacy System Preferences pane cannot open!

my env:
- Max OS X 10.7.3
- 2.2 Ghz Intel Core i7
this month , i can not enter Security & Privacy pane from System Preferences
- when i click
- pop alert windows, tell some error
what can i do now?!

that magic is:
- my MacBookPro set up two user
- in my user, Security & Privacy System Preferences pane cannot open!
- but switch another user ,
open Security & Privacy System Preferences pane is OK?!
What make this happened?!

4.3 Multi User Mode; Where?

According to Samsungs Official Site and the 4.3 Upgrade it talks about having us have "Multi User Mode" Which means you can pass your smartphone to someone else, they can log in and have access to all their stuff (emails Im thinking)
But I cant seem to find it on my cell phone. How bout you?
So then a Samsung Agent said it wasnt currently available on my device and gave me a list of what did change.
It said "Updated Interface: Home/Apps/Lock/Notification Panel" So I asked....what changed on Lock screen...perhaps the Multi User ability?
She said "No, a signature lock screen" I said "Hmmm" Yeah you have the ability to use your signature to lock unlock your device.
I said ....."I didnt get that update"
So I'm here asking the rest of you...how do I access the Multi Users function...where is it and also did anyone else get a "signature" option for lock screen?
Thanks

Sorry it took so long to respond; been busy.
Okay well what I viewed was off of Samsung's website so I know Verizon has nothing to do with it; just kinda sucks that its advertised and I'm mis-informed by the creator of my phone LOL
Providing Verizon will let me provide a link to a 3rd party site heres the link I got the info off of:
http://m.samsung.com/us/article/premium-suite-update-for-galaxy-devices?marsLinkCategory=mphone:mphone&MKM_RID=0130085086&MKM_MID=4289732&CID=eml-mb-cp-1013-499
Note at the very top of that page (link I provided) it says this: Our latest software update opens up a new world for your Galaxy S® 4, Galaxy Note® II and Galaxy S® III with Android 4.3, Galaxy Gear compatibility and an emphasis on security and privacy (no mention of the word Tablet, unless one of those words is implied?....myself I own a "Galaxy Note 10.1" tablet)

Multi User Skype

Multi User Skype was great until the latest software upgrade, which in my opinion was actually a downgrade. It is now awful - it keeps on dropping out - then users can't connect. It is totally unreliable. Very dissappointing.
[Removed for privacy]

Multi User Skype was great until the latest software upgrade, which in my opinion was actually a downgrade. It is now awful - it keeps on dropping out - then users can't connect. It is totally unreliable. Very dissappointing.
[Removed for privacy]

Can't open Security & Privacy preference pane?...please help.

Hi All,
I would be grateful if anyone could assist... I can't seem to open the security & privacy preference pane. I receive the following "Preferences Error" upon trying to click the icon in my system preferences:
First click: You can’t open Security & Privacy preferences because it doesn’t work on an Intel-based Mac.
Second click: Could not load Security & Privacy preference pane.
I noticed the issue this past week when I installed some monitor callibration software. After downloading, the software's interface text did not load (it was simply blank for the drop down menus). The manufacturer tried to help me by clearing font cache and such, but that was not the issue. When he next directed me to the S&P pane, that's when I noticed I couldn't open it to adjust anything.
* I did go into Users & Groups and created a new admin user. I was then able to open the Security & Privacy pane, and load the monitor calibration software without any problems, so it seems to be a user issue I suppose? Tried to trash some security preferences, reinstalled 10.8.2, but with no luck.
Thanks for your assistance!

Try booting into the Safe Mode. Shut down the computer and then power it back up. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This does some maintenance routines and 3rd party applications don't load. Sometimes 3rd party applications are the problem. If your normal user account works in Safe Mode, it is probably a 3rd part application.
Safe Mode
Safe Mode - About
General information.
Isolating issues in Mac OS X
Troubleshooting Permission Issues
Step by Step to Fix Your Mac

How do i disable "change password" in "security & privacy"

Hi... i think something might be wrong... I have a standard account (for a child) that is locked down by parental controls by an admin user. I've locked changing the password - "Disable changing the password"... The lock icon is locked for users and groups in the standard account - so that works.
However if i goto System Preferences/Security & Privacy/General/Change Password it allows for changing of the standard account password and does not require the admin password.
Really? Can anybody else confirm this? How do I lock this also?
thanks in advance.

This isn't an answer.
You aren't the only one seeing this behavior. If you monitor the "More Like This" box (top right), other threads appear. Opening them usually displays other threads.
You might want to submit feedback to Apple so they are aware of the problem:
http://www.apple.com/feedback/

Since iPad is not a multi user device,

I'm interested in how other users deal with this.
My 1st iPad (I'll purchase more) is a coffee table device available to family and friends. Since I have many Apple products and confidential information that I don't want to share with friends/family/friends of family, I have taken the follow steps:
1. Not synced with Mobile Me, even though I subscribe, I don't want other people to sync to my master computers/databases. They can't make changes to my personal data.
2. I created a new email ID only used by the iPad. All mail sent by "other people" are sent from this ID.
3. Create Mail rules to forward general purpose family email to the iPad email ID.
4. Create subfolder/smartfolders of contacts, calendars, photos, etc and just download those subsets during sync.
5. Entrys into the iPad calendar upload into my master calendar but don't change anything I have set.
6. Contacts contain a small subset of family, friends. People that the typical user would email.
The iPhone, iPod have all been "personal devices". Information loaded wasn't as critical because that device was in one's personal possession. The iPad in many cases crosses that line into a multiuser device with single user support. All your personal data shouldn't be loaded for others to see/modify.
Your thoughts?

It's true, Capt. Fred, there's no security as yet on the iPad. Pages doesn't even let you save anything with a passcode. There are third party apps that will secure things (like +Documents to Go+ and Safe ) so you can secure files if you want to. You can also, of course, secure the entire iPad as you could the iPhone. It even has that feature that wipes the whole thing clean after 10 wrong password entries. But other than that, the whole thing is open and it does not support more than one user. There has been discussion of that elsewhere in this forum. In order for the OS to support a Windows or Mac like multi user account system, the thing would need to get a bit more complex than Apple wants just now, I think. But as more and more users migrate to the iPad for pretty much full time use, there will be more and more clamoring for more complexity and functionality. So it's a matter of time, I think. Already Apple is going to multitasking in the upcoming OS 4.0 upgrade for iPad and latest iPhones. My only question is, will my first run iPad support these inevitable future upgrades? We'll see, I guess. Sure hope so.
Message was edited by: StevePug2

UPK11 - multi-user environment - manage author permissions - help

We are configuring our UPK 11 multi-user environment.
As we have it set, the "everyone" group has modify access to all folders.
I would like to have a few admins have modify access to the system folder and everyone else be read only.
Here's my dilemma -
My admin profile is also a part of the everyone group - so if I set the permissions on the everyone group to read only, that effects the admin login as well.
The documentation says that if I set up an author with explicit folder permissions, that they are not included in the everyone group, but everytime I try, they are added (irrevocably) to the everyone group before I can even assign an explicit permission.
I tried to set the everyone group to read only and nearly hobbled my admin account.
Can someone who has managed authors in a UPK 11 multii-user environment send out some tips?
I'm not understanding the documentation well enough to make headway.
[email protected]

Hi Paul,
I recently performed an implementation of UPK 11 at a client and had to show one of their employees how to administer the security surrounding profiles and authors.
The group "Everyone" is default, and each person will belong to that group. It seems that when a person is assigned to another group/with author-specific permissions, it will override that which is set to the "Everyone" group.
What I normally suggest (and implement) is that you modularise your security (separate the authors into their respective departments), and then create those departments as groups, and then assign permissions as required. Lets use an example - it assumes you are logged in as an admin user:
I create 3 folders (where 4 and 5 are defaults):
1. HR
2. FIN
3. CS
4. Administrators
5. Everyone
Each author is defaulted to number 5, and all administrators should be included in group 4.
Now the goal is to prevent HR and FIN from modifying CS, and vice-versa for the other two groups.
You will see in your library that the root is defined as "/". Firstly, ensure that the Administrators group has Modify access to this folder (Administration --> Manage Groups --> Permissions). I think you need to click on edit, then click on the "Add" button (under permissions), and choose the root folder "/" - ensure it has modify - by default this value should already exist. This now ensures that the security is filtered down to all sub-ordinate folders that exist under the root folder - you do not need to manually assign "modify" permissions to each folder for the Administrator group, as you have already done so at root level.
You will also notice that there is a "Members/Users" tab (can't remember off the top of my head which), and this allows you to select the profiles/authors that have Administrator group priviledges - ensure the correct users are selected.
I normally leave the "Everyone" group as it is - do this for now, ensure everyone is included in it, and only modify after you have implemented and tested your security structure if needs be - normally the other group permissions override the "Everyone" group permissions.
Next step is to assign department specific permissions to the 3 folders we created. Navigate to Administration --> Manage Groups, and ensure that you begin by editing the first department group (HR) - create the group if not already done, then edit (little pencil logo). You would like all HR users to have full modify access to their folder only, but they must not be able to mess around with the other two departments or the "System", "Getting started with UPK" and "/" folders. Under permissions, click on the Add button, and ensure that the folder "HR" has modify priviledge. Add the remaining 4 folders (CS, FIN, System, Getting started with UPK), and assign either Read or Read/View permission - this will ensure all other folders cannot be modified by HR users. Add the relevant HR users to the group under the "Members/Users" tab.
Apply the same for FIN and CS respectively.
Now you could get to a point where you may need cross-departmental access for a few users (FIN may need to access some HR content). I recommed that you do this on the user level, and not the group level, as you will limit who can access other departments. Navigate to Administration --> Manage Authors. Click on the specific user that will require access to another department. Edit his profile and under the permissions tab, ensure that he has required access to the other department folder (or sub-folders only) by adding and assigning the priveledge. This should ovveride the group security set for that specific department - but only for this user!
Test by attempting to create content in an un-authorised folder (when logged in as a normal user). Test admin account by creating content in each folder. If it works - you will no longer need to modify "Everyone", as your permissions are defined under the other groups. I hope this all makes sense?
Thats it in a nutshell really.
I hope that this helps, and feel free to get back to me if you are still unsure?
Regards,
Greig

Security & Privacy preference pane not opening

All of my system preferences panes work except Security & Privacy. This has been broken since installing 10.9.0 and 10.9.1 hasn't fixed it. Pane tries to open then gives the error, "There was an error in Security & Privacy preference pane." Looked through other posts for solutions but nothing seems to work. Tried creating a new user account, deleting caches, systempreferences.plist. Took into Apple Store and they suggested restoring from TimeMachine backup but that did not fix it. Been dealing with this for a while but now I really need to install an unsigned app and can't get to the security pane to allow it.

Our preference panes seem to be identical.
There are two other things you might want to investigate:
1) Although this is unlikely, look in /Library/PreferencePanes to see if for some reason there might be another copy of Security.prefPane.
2) Another possibility may be that a settings file is corrupted. One such file seems to be in your account's Library folder. In the Finder hold down an "option" key while you pull down the "Go" menu, then select "Library". In the resulting window open "Preferences". Find the file com.apple.systempreferences.plist. With System Preferences not running, drag that file to the Desktop. Then see if you can access the Security & Privacy panel.

HT5934 How can I disable the lock screen option. I do not want to punch in a multi-digit security code every time I need to use the phone

How can I disable the lock screen option? I do not want to punch in a multi-digit security code every time I need to use the phone.

System Preferences - Security & Privacy - unselect the box called Disable automatic login

File Discrepancies for Multi Users

Hi ...
We are running RH7 and RSC3.1 with 3 users - We identified
(only yesterday) that after User 1 had deleted one topic file from
Project Manager and added several others ... User 2 and 3 had
broken links for these topics.
We are able to update existing topics by one user, who check
in, then user 2 and 3 can get the latest version and instantly view
the changes - lovely!! Exactly what we would expect ...
But the same is not occurring when we remove or add entire
topics to both the Project Manager and the TOC ...
User 2 and 3 see the topics in the TOC with the dreaded red
cross through them ... and have to try and locate the file or
restore broken links etc ... to get their view of the project in
sync with User 1. This seems to defeat the whole purpose of being
able to have a multi user authoring environment????
A major concern of this problem appears to be the risk of
undoing each others work by potentially restoring files that
another user intended to remove ...
Is anyone else experiencing similar issues ... we are in a
big organisation and are very restricted in terms of our ability to
access the servers etc ... but I want to know if there is something
we should be checking or doing differently from an application
perspective? Any advice or ideas are greatly appreciated...
Many thanks ...
Frustrated!

Hi Fi@qldpol, and welcome to the board. With your situation,
there are two likely possibilities:
1. Was your project added to source control via RoboHelp, or
was it initially added using RoboSource Control? If it was added
from RoboSource Control, then that is the problem.
2. If #1 is not the problem, then you might be having
problems with some of the users' CPD files. First, have everyone
make backups of the local version of their project (the files
actually residing on their PCs). Then have User 2 and User 3 delete
their copy of the project, and replace it with a copy of User 1's
local files. Before they open the project, they should delete the
cpd and pss files. After they delete those files, they can open the
project as usual and let the cpd file rebuild. We have to do this
every so often with some of our projects to get everyone
synchronized.
Hope that helps.
G

I have windows, one computer but multi users. home sharing is on. how can i share music between users on one computer?

I have windows. One computer but multi users. Home sharing is on. 2 apple accounts-1 per user. 4 devices-2 iphones and 2 ipods per user. How can we share music on one computer between 2 users?

Hi Justinece, I've solved the problem in this way:
In my wife user profile I've set in itunes settings/advanced the path to my music library: /Users/"MY NAME"/Music/iTunes/Itunes media.
Than, from my wife profile using my administrator user and password I've set the "read/write" privileges on the above mentioned folder.
Finally I've added the folder in my wife's library taking care to not duplicate it ( leave blank the flag in itunes setting/advanced).
I really don't understand what's the use of home sharing...

Trying to access Lion server remote using multi-user access, but from a legacy Leopard system

Just purchased a mini server running Lion, and got screen sharing working fine from my legacy system (32-bit so Leopard only). However, I would like to run in multi-user mode, so someone can use the Lion system and another person can access their own account, from the older Leopard system, at the same time. Using multi-user rather than screen sharing. But Leopard does not have the option on the Finder/Share Screen command, the pop-up window to select screen sharing or new virtual session. So, is there a way still to run a new virtual session from a remote client running Leopard? Since the multi-user capability resides on the Lion server, it should be possible, but how, without the pop-up menu?
Message was edited by: Kurt-Syracuse

Hey. I suggest you check out http://discussions.apple.com/message.jspa?messageID=9839785#9839785, where there are a couple solutions posted in regard to the error code -36 when connecting to a samba share. Good luck!
Jeremy A.
Tekserve Intern

Multi-user security & privacy

Similar Messages

Maybe you are looking for