Read/Write, no Delete permissions

This should be fairly obvious, but I cannot come up with the correct ACL settings in 10.5/10.6 to create a file share that is read/write to a specific group, but they cannot delete. This is a photo archive that needs to allow people to add files, but not remove them. Seems like unchecking the "Delete, Delete Subfolders and Files" should (leaving Read completely checked and should apply to All subfolders and files.)
What am I missing? I'm sorry I don't have more to offer specifics-wise on the server at the moment, because I'm offsite. But here are some details:
10.5.8 Server on Intel Xserve w/XRaid attached.
OD Master running internal DNS that resolves back and forth correctly
Users connect via AFP, but Bonjour is disabled.
Several other shares(folders) on the RAID, but only this one requires this set up. No matter what combination of Permissions I check, logging in as the user(AFP) via Kerberos produces 3 results:
1. User can read/write new files, but can also delete (bad).
2. User can only read, no write/delete (bad)
3. User can no longer see share point.
This seems simple and perhaps I need to try removing the ACL altogether but it seems severe.
Can someone create a working share like that and post the screenshot?
I can get more specific information next time I'm onsite.

I may have found my solution here:
http://discussions.apple.com/thread.jspa?threadID=2114195&tstart=105
Looks like I need to change the POSIX to the photo group instead of the 'admin' on the server.
I will give a try on my next visit and report back.
Message was edited by: Shawn Punga

Similar Messages

Getting file read/write/execute permissions.

How can I get the read, write, and execute permissions for either a named file, or a File? I'm only interested in the permissions exposed to whatever user is running the VM.
System.getSecurityManager() either returns null or some default SecurityManager that denies everything... I guess you have to set that explicitly, which doesn't really help me here.
I've been browsing through the docs but I can't find anything that returns a FilePermission. It's highly possible that I missed something, though.
Thanks in advance,
Jason Cipriani
[email protected]
[email protected]

Thanks for replying.
That was the first thing I looked out. As it turns out, FilePermissions aren't for getting permissions on named files. Rather, they are for dealing out permissions that you set yourself, or representing permissions internally. If you look at the constructor for java.io.FilePermission, you'll see that, in addition to a file name (which, btw, can be anything since the constructor throws no IOException), you must also provide a list of permissions.
So, unfortunately, that class can't take a file name and provide you with a permission list... it's just there for you to use to store permission information.
That frustrates me a lot, because the name, FilePermissions, makes it seem like the most promising class to use for my application.
Thanks, though,
Jason.

Read/Write vs Full Control on KM folders/files

I've read some docs on what Read/Write vs Full Control permissions mean when setting permissions for users/groups for folders and files. But I'm still somewhat confused.
What exactly does the 'Write' mean in Read/Write. Does Write mean a user can:
Create a new folder
Create a new file
Modify an existing file
Delete a file
Delete a folder
When you use the pull down for setting permissions, you see: Full Control, Read/Write, Read, Write and Delete. Kind of confusing. And you can only select one of them.
Any clarification on these permissions would be greatly appreciated. Or pointing me to some good documentation.
Thanks in advance. Ron

Access authorizations
Read
Permission to display items.
Write
Permission to change items but not to display them.
In folders, this permission also allows users to create items.
Read/Write
Permission to display and change items.
In folders, this permission also allows users to create items.
Delete
To delete an item, you require delete permission (or full control) for this item and write permission for the superordinate folder.
Full Control
This permission contains all other permissions.

Prevent file deletion on server but allow read/write permissions

So, I have several iMacs that are basically public computers. They will all access a shared server. The machines need to possess all of the user permissions of a "read/write" user with the EXCEPTION of being allowed to delete. As it is now, a random user could delete our entire server in two clicks. So, I need to somehow secure our data while still allowing the "reading" and "editing" of files.
Here's what I need to do:
• Somehow disable the delete file function altogether (while still maintaining read/edit permissions) or
• Find some 3rd party app or workaround that prompts the user with a password dialogue box in order to execute the "delete" function or
• Somehow apply permissions to a specific folder on the server that enables read/edit, but disables file deleting by users
I set the permissions of my trash folder to "read only" however, this only prevents deleting local files and doesn't prohibit deleting files from the shared drive.
Thoughts?

I'd rethink the requirements.
The literal answer is that yes, you can mark the files as being undeletable.
The access control list setting via the command line chmod command is something akin to the following:
chmod +a "groupname deny delete"
In practice, these same requirements do allow the shared files to be effectively deleted; via overwrite. (This is why the Unix-layer file protections don't bother to differentiate write from delete access.) These requirements also allow partial file corruptions, a situation which tends to be far more pernicious.

Making NTFS permissions read/write without ability to create/delete folders

Out at one of our job sites we have a server running Windows Server 2012 R2 that's got a file share accessible to our onsite people. Our project managers have devised a very strict folder structure for this file share, and for auditing purposes they want
to stick as close to this structure as possible.
Therefore, although people onsite must have read/write access to create, modify and delete files, they do not want them to be able to create or delete folders. They want them to use the existing folders and not tuck stuff away into folders that no one knows
exists except the person who created them.
The closest way I've found to do this is to deselect the advanced permissions 'Create folders / append data' and 'Delete subfolders and files.' This has a few side effects however, the most noticeable being that due to not being able to append data to files,
certain files (such as CAD drawings) can't be edited by anyone except the person who created them.
Is there a way using just NTFS permissions to accomplish what the project managers want? And if not, are there any useful third-party utilities that will help us do this?
Thanks in advance for any assistance.

Hi,
I'm not much familiar with AutoCAD- what's the exact behavior which is stopped by the restricted folder permission?
For example, if AutoCAD will create a folder in editing, we will not have a solution as users needed to create folders so that AutoCAD could run properly.
And if AutoCAD works like Office files, that create a temp file for editing, this will be the solution:
1. Give Domain Admins - Full Control - This folder, subfolders and files.
This is to allow all admin could access and edit all data.
2. Give SpecificUsers group (a group contain all normal users) - Full Control without "Change permissions" and "Take Ownership" -
Files Only.
This is to give that group most permissions to create, edit and delete files but not Folders.
3. Give SpecificUsers group another permission:
Traverse folder
List FOlder
Read Attributes
Read extended attributes
Create files - this is important. Without this permission you will not able to save Office files.
Read permissions.
Give above permissions to "This Folder, subfolders and files".
This is to allow users to access all subfolders.
If you have any feedback on our support, please send to [email protected]

System Folder errors after I changed all permissions on HD to read & write

Hi,
Two things may have caused probs on my new 2010 iMac (Snow Leopard), and Applecare is shut so I would really appreciate some help as I have urgent work.
1) INCORRECT PERMISSIONS
I have been stupid. I clicked on Macintosh HD and changed all permissions to read & write because I wanted to be sure I could open and edit all documents on other computers.
I ran Disk Utility Repair Permissions from the install disc, but I am still getting system error messages, and my HP printer won't work.
The first message, in Repair Permissions, said: Warning: SUID file System/Library/Cores has been modified and will not be repaired. I have read a support doc on this which says no need to worry but I don't like it and would like to fix this.
More importantly, my HP printer won't work, displays error beside the document in print dialogue box.
Deleting the printer and readding it didn't work, so I downloaded new drivers and tried to install them, which is when I got the second system error message: System extension System/Library/Extensions/BJUSBLoad.kext was installed improperly and cannot be used. Please try reinstalling it or contact product's vendor for an update.
I checked the permissions on the file and they were still wrong despite Repair Permissions, allowing everyone to read & write. So I have now clicked on the entire System folder and changed the permissions to: System read & write, admin read only, everyone read only.
Will this fix it or do I need to do something else, such as check ownership, to make sure all permissions on the computer are now correct?
2) MEMORY STICK SHUT DOWN MY IMAC
Additionally (though I don't think this had anything to do with my problems), I inserted a Sandisk USB memory stick the other day and it immediately shut down the computer. When I inserted it into my Macbook it initially rejected it and gave me a message saying the device wanted too much power so it had ejected it to prevent damage to my computer. When I tried again it was OK. I totally reformatted the stick in case there was something harmful on it, but should I now bin the stick as faulty? Scared to use it again.
3) IS IT BEST TO REINSTALL ENTIRE SOFTWARE?
If I do a reinstall of all the software from the install disc, will it wipe out all my data, such as Mail, documents, bookmarks and other apps?
I would back-up, but if I try and back up files on my external drive it will automatically do a Time Machine back-up and I don't want to do that in case it backs-up all the corrupted files. Otherwise, I wouldn't mind starting again just to be sure all is well.
Expert advice would be very much appreciated.
Thank you
Sarah

Oh, silly really. I was in a hurry and working on docs that I needed to take to the office and open on another computer there.
But when I checked the permissions on the doc it said I could read & write but everyone else was read only.
I thought if I opened it on another machine I'd be stuck with read only access and not be able to work on there. I think I couldn't change it, so I thought to avoid any future problems like that I would change everything on machine!
Yikes. Won't do that again
Sarah

How do I give myself read/write access/permissions for my external drive?

Im a brand new Mac user, so please stay with me.
I have an external drive and I can't delete, modify, ANYTHING on it. When I go to "Get Info" it says "You can only read" under sharing & permissions. How do I change this?

When you get info on the external drive, at the very bottom is a box you can check
"Ignore ownership on this volume"...
If you check that, then see if you can delete and move things around.
If that doesn't work then try clicking on the + sign and adding you as an admin so you can Read & Write.

Not allowed to move (only copy) files within Shared Folder (yes, permissions are set to Read/Write)

I have moved my media (Music, Movies, Pictures) to the Users/Shared folder. As I'm doing some cleanup in these folders, I am trying to move several folders/files at once, all within the same Shared folder. I have confirmed that the permissions settings under "Get Info" are set to "Read/Write" and I have verified and repaired permissions with Disk Utility. However, every move I try to do is a copy. I have tried the Command-Drag method, but I'm still left with the green plus sign indicating a copy.
On smaller files/folders, this wouldn't matter so much as I would copy, then just delete the original. But I'm dealing with many, many gigs of music and my HD doesn't have space for holding copies, even if the originals will be deleted.
Very frustrating to have to spend so much time to figure out what would seem to be a very basic file management feature.
I've searched and read and searched some more, but I'm stuck. Thanks to any who can help.

Do have file sharing and remote login checked
When on Betty's computer, Sign into Bob's computer with Bob's username & Bob's Password, instead of Betty's.
BINGO!!!! Problem solved. Many thanks!!!

Is it possible to change the read/write permissions on a time machine back-up of iTunes? I need to restore it, but old version is locked....

Is it possible to change the read/write permissions on a time machine back-up of iTunes? I'm needing to restore it as my phone deleted half our playlists during sync & am not seeing a way to unlock the permissions. I have the current version unlocked, but can't seem to get the backed-up version. When I click on restore I get a pop-up that says iTunes can't be deleted as it is part of the OS. I'm not even trying to delete, just restore the old version. Any suggestions?

Hmmm, ok I'll give it a shot. I've always had the iTunes sync w/ my phone set up to only load selected playlists to the phone b/c there's a lot more in iTunes than I have room or desire for on my phone. A few months back I started having trouble w/ trying to sync everything & subsequently adding more to the phone than it could hold. The quickest thing at the time was to unclick the sync music option in iTunes so I could still backup the phone to the computer & not have a problem.
When I asked about it during one-to-one session shortly after, they advised me to delete the music off my phone & then re-sync it to the computer, run a backup of the phone & redownload the music to the phone. When I tried this it ended up deleting all my playlists (but not my husband's) from iTunes. Irritating, but I've been rebuilding the playlists since. I had also unclicked sync music again & an Apple person told me the most likely best fix was to delete & reload iTunes completely.
A few days ago I realized I hadn't backed up the phone to the computer in over a month so after deleting & reinstalling iTunes, & w/o changing anything (sync music was STILL unchecked) I ran a backup & my phone went from having 4 GB free space to being 2 GB over capacity due to iTunes trying to download the entire music library to the phone. I made a one-to-one appt again & it was suggested AGAIN that I delete all the music off my phone & then resync it to the computer & redownload the music. We did this (though a few random songs that had previously been purchased somehow remained on the phone), I got home, connected the phone & instead of the music that shows as 'on my device' disappearing from iTunes it just sat there, so, as the guy had told me I MIGHT have to do, I threw all those songs showing in iTunes as being on my phone, in the trash so that it was completely clear.
At this point I checked sync music, made sure the options were 'selected playlists only', checked the ones from my own list that I wanted (I usually have one playlist of comedians from my husband's folder that I also have on the phone, but didn't check it at this point). It uploaded all my stuff just fine, but for whatever reason when it saw that I wasn't uploading that comedy playlist any longer, it not only didn't upload it but proceeded to delete my husband's entire folder of playlists from iTunes. -_- I got on the phone w/ an Apple support person right away but he wasn't able to tell me anything .. basically said we'll have to rebuild everything. I asked about the possibility of using time machine, he said he's not qualified to answer that, so that's when I started looking around online & found, among others, the link I referenced a couple replies ago.
I hope this all makes sense. It's been a long-term issue so I'm trying to go from memory as I figured to begin w/ that I had just made a mistake somewhere, so didn't try to document anything. Now w/ it having happened a 2nd time, I'm not sure if it was 'user error' or something else.......

Can't update photos using iPhoto 6 - read/write permissions

Help!
Before you think this is the standard "iPhoto 6 permissions problem", please read on.
Upon installing iPhoto 6 and attempting to update my iPhoto Library, I get the dreaded "There is a problem accessing...files in your iPhoto Library folder...Make sure you have read and write permissions for the folder...all enclosed items." This is the problem noted in:
http://docs.info.apple.com/article.html?artnum=303135
However, it doesn't tell me what file(s) have the problem, even though the app note says it would for OS 10.3.9. No matter. I simply first did a get info on the iPhoto Library folder verified that it was not locked and that I had read/write permissions. I also applied that to everything inside the folder. Ran iPhoto again...same error.
Although I didn't get the "repair permissions" error, I did that too. Ditto for the locked files issue reported at:
http://docs.info.apple.com/article.html?artnum=303232
After attempting the update at least a dozen times, I even tried the UNIX chmod command (774) on everything in the iPhoto Library folder just in case the "get info" method didn't take. Still get the same error when updating iPhoto 6. What gives!
I willing to try any suggestions ya'll might have!
FYI - I do have my older version of iPhoto available and I have a complete backup of my iPhoto Library.
Thanks!
david

Hi David,
It's up to you, unless someone else comes along with some more things to try.
I am assuming you still have a version 5 of the iPhoto Library folder in the Finder.
Rename it to iPhoto Library_old and drag it to the desktop.
Do a search in the library for Thumbs. this will find all the Thumb folders which you do not want to import into the new Library. Delete those Thumb folders.
Now you have to decide if you want to import both the Original and Modified versions of a photo, or just the Originals. The problem is, if you import both, they will no longer be linked but will show up as separate photos in the library.
Actually it is going to be a big pain unless you have just the photos backed up to reimport.
If you want, you can check out a page I made showing the manual way to import the photos (#3)
http://homepage.mac.com/loridilo/iPhoto5help/Personal22.html

Can I batch change user access to folders & file read-write permissions?

I had a corrupted user account on my iMac and after weeks of trying repairs I followed a forum suggestion to delete my account.
Before doing so I synced all my document folders and files (since 2004) over my LAN to an external hard drive that was attached to my MacMini. I then deleted the iMac account.
Next I backed up my Mac Mini user account with Time Machine. I then created a new iMac User account on the iMac and let the iMac access Time Machine to bring over all my MacMini preferences, settings, desktop, etc. I now have a fully functioning iMac user account.
Here is the problem. I attached the USB external drive directly to my iMAC. I can access some of the folders and files on the external hard drive. Most of them refuse to let me acces the folder or open a file. If I use the GET INFO command I see an "_unknown" user with "read and write". I see an "everyone" with "no access". I can individually change each folder and file to allow my user account access and give myself permission to read and write the files. I cannot delete delete the "_unknown" account.
It will take me days to individually change each folder and file manually like I am now doing.
Is there a way to use Automator to add my user account to the folder or file and give me read and write folder and file permissions?
Or is there any other way to do this in a batch change?
Is there something I need to do to the external files right now that will ensure that I can access them if either computer crashes and I need to replace the MAC? I would hate to have to go through this again. Would having a MAC server instead of an external drive solve this?
I am using MAC OS 10.6.8 with the most recent updates installed (as of today).
Thanks,
Sandi Dickenson

Select the icon of the external drive in the sidebar of a Finder window, and open the Info window. In the "Sharing & Permissions" section of the window, click the lock icon and authenticate. Make sure you have read & write access to the volume by changing the settings if necessary. Then, from the action menu (gear icon), select "Apply to enclosed items."
The "_unknown" user and group are assigned automatically to files on a volume with the "Ignore permissions" option set.

Read/Write Permissions for all users and all objects in Users:Shared

Hi:
I am using an application called "iView" to manage my image files. When importing images from my camera through that application, it creates a folder with the current date. The root folder is "Users:Shared:Images", so that everyone using our Mac can access the files. However, the files' permissions are only read/write for the user who downloaded the files (typically me), but I want everyone to be able to edit and delete files. Of course I can change the permissions manually, but there has to be a better way. (In addition, changing the permissions manually afterwards causes Time Machine to backup the files with the modified permissions again).
What do I have to do?
Thanks in advance.
Hinrich

That is the way that permissions work. If you are the owner of a file and want others to be able to read and write it, then you have to give them the permission to do so. To automate this, you can attach a folder action to the shared folder, for example:
<pre style="
font-family: Monaco, 'Courier New', Courier, monospace;
font-size: 10px;
margin: 0px;
padding: 5px;
border: 1px solid #000000;
width: 720px;
color: #000000;
background-color: #FFDDFF;
overflow: auto;"
title="this text can be pasted into the Script Editor">
on adding folder items to ThisFolder after receiving AddedItems
repeat with AnItem in AddedItems
tell application "Finder" to set everyones privileges of AnItem to read write
end repeat
end adding folder items to
</pre>

Can't change read-write permissions on DMG despite ownership

Hey there! So, I recently followed these instructions to create a 20 megabyte, 128-bit encrypted DMG on my hard drive in order to password-protect some confidential documents. I have had no problems opening the DMG or editing its contents, but today I discovered that I am unable to add, delete, or edit its contents, as I receive the following message: "The document "___" could not be saved as "___". The volume “Encrypted” is read only."
I'm able to mount the DMG and open the document, but I can't make any changes. First, I tried changing the permissions on the document itslef; I went to "Get Info," but I discovered that the Sharing & Permissions indicates I (the admin) should be able "Read & Write." I wanted to to tinker with this, so I clicked the lock icon at the bottom of Info and entered my password, but--mysteriously--I can't change the permissions settings, even when unlocked. I click, but nothing happens.
Same thing when I try to change permissions for the whole DMG. It says that I have "Read & Write" permissions, but I can't try messing with these settings even after unlocking.
Now, it's possible that at some point in the last couple of weeks I may have changed the setting of the document to "locked"--I honestly can't remember--but shouldn't I still be able to "unlock" it given my admin status? And even if I compromised that one file, why can't I save any new documents to the DMG?
Any ideas as to how I can return my DMG to true read-write status?
Thanks ever so much!
embr

Okay, so I figured it out, and it was an "Oh, duh!" moment. Figured I should explain for anyone else experiencing this problem.
The DMG was locked, but I couldn't see this or change it while it was mounted. So, if you encounter this problem, simply eject the disk, then navigate to its location in Finder, Get Info, and uncheck the "locked" option. That did the trick for me!
embr

Read write permissions

When I move a folder from an external hard drive to the internal hard drive on my laptop, all the files and folders become read only. It is very annoying to change hundreds of files to read/write for use with Word or Photoshop and other applications. Just changing folder permissions does not change the internal files. Is there a general solution to this problem?

http://en.wikipedia.org/wiki/Filesystempermissions
Files on a Web server are a lot different than "local" files. On your Mac you have a "User" account and only you have access (assuming you've set a password for log-in at that account).
The files found on a server (MobileMe or any other) would be uploaded by "you" and access to those files is also password protected. If your password could be found anyone could modify or delete your files because the server wouldn't "know" it wasn't you that authorized those changes.
This is a lot different than the Unix file system permissions used in OS X. Since you could have dozens of User accounts then each of those accounts could access the iWeb application. But they couldn't modify any file stored in an other User's "Home" folder (where the iWeb package file is kept).
Apple servers could access your files stored or served from your iDisk. It's part of the terms of use agreement that you allowed when you signed up for the service. This is an entirely different version of file "permissions".
I may not have explained this in the best fashion or skill. Others are free to chime in.

How do you create default Read/Write Permissions for more than 1 user?

My wife and I share an iMac, but use separate User accounts for separate mail accounts, etc.
However, we have a business where we both need to have access to the same files and both have Read/Write permissions on when one of us creates a new file/folder.
By default new files and folders grant Read/Write to the creator of the new file/folder, and read-only to the Group "Staff" in our own accounts or "Wheel" in the /Users/Public/ folder, and read-only to Everyone.
We are both administrators on the machine, and I know we can manually override the settings for a particular file/folder by changing the permissions, but I would like to set things up so that the Read/Write persmissions are assigned for both of us in the folder for that holds our business files.
It is only the 2 of us on the machine, we trust each other and need to have complete access to these many files that we share. I have archiveing programs running so I can get back old versions if we need that, so I'm not worried about us overwriting the file with bad info. I'm more concerned with us having duplicates that are not up to date in our respective user accounts.
Here is what I have tried so far:
1. I tried to just set the persmissions of the containing folder with us both having read/write persmissions, and applied that to all containing elements.
RESULT -> This did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
2. I tried using Sandbox ( http://www.mikey-san.net/sandbox/ ) to set the inheritance of the folder using the methods laid out at http://forums.macosxhints.com/showthread.php?t=93742
RESULT -> Still this did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
3. I have set the umask to 002 ( http://support.apple.com/kb/HT2202 ) so that new files and folders have a default permission that gives the default group Read/Write permissions. This unfortunately changes the default for the entire computer, not just a give folder.
I then had to add wife's user account to the "Staff" group because for some reason her account was not included in that. I think this is due to the fact that her account was ported into the computer when we upgraded, where as mine was created new. I read something about that somewhere, but don't recall where now. I discovered what groups we were each in by using the Terminal and typing in "groups username" where username was the user I was checking on.
I added my wife to the "Staff" group, and both of us to the "Wheel" group using the procedures I found at
http://discussions.apple.com/thread.jspa?messageID=8765421&#8765421
RESULT -> I could create a new file using TextEdit and save it anywhere in my account and it would have the permissions: My Username - Read/Write, "Staff" or "Wheel" (depending on where I saved it) - Read/Write, Everyone - Read Only, as expected from the default umask.
I could then switch over to my wife's account, open the file, edited it, and save it, but then the permissions changed to: Her Username - Read/Write, (unknown) - Read/Write, Everyone - Read Only.
And when I switch back to my account, now I can open the file, but I can't save it with my edits.
I'm at my wits end with this, and I can believe it is impossible to create a common folder that we can both put files in to have Read/Write permissions on like a True Shared Folder. Anyone who has used windows knows what you can do with the Shared folder in that operating system, ie. Anyone with access can do anything with those files.
So if anyone can provide me some insight on how to accomplish what I really want to do here and help me get my system back to remove the things it seems like I have screwed up, I greatly appreciate it.
I tried to give as detailed a description of the problem and what I have done as possible, without being to long winded, but if you need to know anything else to help me, please ask, I certainly won't be offended!
Thanks In Advance!
Steve

Thanks again, V.K., for your assistance and especially for the very prompt responses.
I was unaware that I could create a volume on the HD non-destructively using disk utility. This may then turn out to be the better solution after all, but I will have to free up space on this HD and try that.
Also, I was obviously unaware of the special treatment of file creation by TextEdit. I have been using this to test my various settings, and so the inheritance of ACLs has probably been working properly, I just have been testing it incorrectly. URGH!
I created a file from Word in my wife's account, and it properly inherited the permissions of the company folder: barara - Custom, steve - Custom, barara - Read/Write, admin - Read Only, Everyone - Read Only
I tried doing the chmod commands on $TMPDIR for both of us from each of our accounts, but I still have the same behavior for TextEdit files though.
I changed the group on your shared folder to admin from wheel as you instructed with chgrp. I had already changed the umask to 002, and I just changed it back to 022 because it didn't seem to help. But now I know my testing was faulty. I will leave it this way though because I don't think it will be necessary to have it set to 002.
I do apparently still have a problem though, probably as a result of all the things I have tried to get this work while I was testing incorrectly with TextEdit.
I have just discovered that the "unknown user" only appears when I create the a file from my wife's account. It happens with any file or folder I create in her account, and it exists for very old files and folders that were migrated from the old computer. i.e. new and old files and foders have permissions: barara - Read/Write, unknown user - Read Only, Everyone - Read Only
Apparently the unknown user gets the default permissions of a group, as the umask is currently set to 022 and unknown user now gets Read Only permissions on new items, but when I had umask set to 002, the unknown user got Read/Write permissions on new items.
I realize this is now taking this thread in a different direction, but perhaps you know what might be the cause of this and how to correct or at least know where to point me to get the answer.
Also, do you happen to know how to remove users from groups? I added myself and my wife to the Wheel group because that kept showing up as the default group for folders in /Users/Shared
Thanks for your help on this, I just don't know how else one can learn these little "gotchas" without assistance from people like you!
Steve

Read/Write, no Delete permissions

Similar Messages

Maybe you are looking for