Set desktop permissions to 666? How?

I'm always processing images to my desktop so I can zip them up and send them off somewhere. Lately I've had to change permissions to 666 on every folder/image I send out because I was getting complaints they were corrupt under 644.
I've tried changing my User folder, Desktop folder, Original Image folder, etc. NOTHING fixes this problem. I've tried dumping the images in a new folder with 666 permissions and they STILL show up 644. Tried duplicating the desktop folder and even used the system disk to reset my ACLs. Nothing changes it.
Can someone offer some advice to solve this? It's very annoying. Thanks.

Sorry to butt in here, V.K., but I don't think 664 is supposed to be the default. I checked on two different macs running 10.5.6 and both give the following results from uMask -S:
Last login: Mon Feb 9 23:25:05 on console
MacPro:~ josh$ umask -S
u=rwx,g=rx,o=rx
I take it the default should in fact be 755, correct? Is it possible it is not applying the correct permissions in the first place? Seems by 644 you would be missing executable altogether so that might possibly cause problems when opening on other operating systems...
Correct me if I am wrong as I do not really know a lot about Unix... still learning :P

Similar Messages

IMac at work, iMac at home. (Latest Yosemite and Apple Remote Desktop updates installed) Need to work from home at night. I don't know how to set my permissions so that I can just control my iMac at work.

iMac at work, iMac at home. (Latest Yosemite and Apple Remote Desktop updates installed) Need to work from home at night. I don't know how to set my permissions so that I can just control my iMac at work.

If they have set up port forwarding for you already then that is different. In that case, then you could be experiencing the bug with the most recent release of ARD (3.7.2) and in particular ARD 3.7.2 and Yosemite ARD version 3.8 clients. It has been reported numerous times in the forums and to Apple that since 3.7.2, clients are frequently unavailable to connect to despite there being no network issue between the remote computer and client computer. I have not seen anyone report it who was working from outside the LAN to inside the LAN, but I have the same issue with a number of my own computers that are simply on a different subnet, so it stands rot reason that it would happen from a port forwarding location.
I am sometimes able to resolve the issue locally by SSH connecting into the client computer using Terminal on my admin machine and restarting or relaunching the ARD agent on the remote device, then trying to connect to it again after about 30 seconds.
The Terminal commands for this procedure are as follows, though you might need to include a port number from outside the LAN:
First:
ssh ipaddress -l adminusername
(example: ssh 192.168.1.1 -l macadmin)
Second:
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart -restart -agent
After that, waiting about 30 seconds and trying to observe or control usually works, though the computer may still fail to show an online or lit-up status indicator.

How do we set the permissions for....

Using Acrobat 9, Setting permissions is very confusing!
How do we set the permissions for document so that:
-- the end user needs no password
-- Printing: Allowed
-- Changing the Document: Not Allowed
-- Doument Assembly: Not Allowed
-- Content Copying: Not Allowed
-- Content Copying for Accessability: Not Allowed
-- Page Extraction: Not Allowed
-- Commenting: Allowed
-- Filling of Form Fields: Allowed
-- Signing: Not Allowed
-- Dreating of Template Pages: Not Allowed

Not possible. If you allow filling in forms you must allow signing. BTW, while it is nice to be able to set permissions anything that depends upon passwords that you set is easily overcome by third party utilities. Don't do anything that really depends upon these permissions. If you want to set permissions using the Document Properties Dialog box (control D), then click on the Security button. In the Security Method Dialog box, select password security and fill it out as you need.

I have a desktop osx 10.8.2 and I want to have a password set before i log on how do i set it and still see my iphoto pictures still flash when it is in sleep mode

I have a desktop osx 10.8.2 and I want to have a password set before i log on how do i set it and still see my iphoto pictures still flash when it is in sleep mode

Open the Users & Groups pane of System Preferences and disable automatic login, and then go into the Security & Privacy pane and set the computer not to log out after a period of inactivity.
(77781)

JAAS - How to set up permissions for a specific code?

I would like to set up permissions for specific code in JAAS policy files.
In other words, let's say I have the followiong entry:
permission java.util.PropertyPermission "java.home", "read";
Then, when I do Subject.doAsPrivileged(..., MyAction), if this permission is absent, I will not be able to access the "java.home" property in my MyAction.
If I, let's say, set up a file permission, I will not be able to read certain files if the permission is absent.
I want something simpler. I want to be able to specify that the whole class MyAction cannot be executed if the permission is absent - I do not want the code to even go there. Basically, if the necessary entry in the Policy file is not present, I do not want the calling code to have access to class com.mypackage.MyAction.
This must be really straight-forward, what am I missing?

Thank you for your input.
My case is a little bit more complex.
There is a request and approval process attached to the provision to this target system.
The approval process has a first level of approval (including 1 to many approval steps) and the user gets the basic access to this target system. The user can then access the target system but is limited to what he/she can do.
Then the approval goes to a second level of approval (including many approval steps) and if approved the user gets the elevated access to this target system.
To accomplish this, the previous implementer created 2 resources for the same target. After the first level of approval, he provisioned resource A to the user. After the second level of approval, he provisioned resource B to the user, revoked resource B, and updated resource A.
This is very confusing because we are dealing with 2 resources for the same target.
I am looking for way to take advantage of the GTC to provision and reconcile with a system that takes a flat file and can write a flat file. But I also need to make it work with this approval nightmare.
Do you have any ideas on how to make this better and simpler?
Thanks
Khanh

I have 2 sets of permissions, how do I delete one?

I have five Macs, one G4 and 4 - G5's. G5s are running Snow Leopard 10.6.8.
Five graphic designers, who back up their work on a Mac XServer 10.6.6
Permissions on the designer's Macs are set to read/write for everyone.
Designer A backs up his job to the XServer, then Designer B needs to edit it, so she attempts to pull it off the XServer.
Permission denied for only some of the files, not all.
I guess I need some guidance on the proper way to administer the ACL on the Xserve.
I have set up an ACL group on the server. The strange thing is, there are 2 sets of permissions showing, one seems normal, but the other is labeled "Custom".
Is there any way I can log in as something other than the Administrator, and "wipe out" the custom permissions?
I usually do not mess around in the Terminal.
Thank you for any insights...

As Templeton Peck says, the proper way is to use the repartitioning facility, but this will result in loss of data.
However, SubRosaSoft do make a utility, Volume Works ($10), that will do this resizing on the fly. A complete back up would be prudent in either case.

How to set file permissions for SFTP uploaded file?

Hello,
is it possible to set file permissions with the SDK for files uploaded via SFTP transfer? I use the default sample plugin ftp_upload.lrdevplugin to transfer the files, but would like to tweak it to set the uploaded file(s) to permission 644 (rw-,r--,r--) on Linux server. Currently the server sets new file(s) by default to 600 (rw-,---,---).
I am looking for an option to do the "chmod" directly from Lightroom without doing any modificatios in general to default umask, etc. settings on the server. No real UI is needed for this. Just hardcoded setting for 644 in the .lua.
So far I've been unsuccesful in finding the way. Googled, read this forum, looked at the API. Maybe I just missed it, or does this functionality exist?
All advice is appreciated!
Cheers,
Timo

Niel's suggestion is good. You might also try posting your question in the Tiger Server forums. I'm sure Tiger Server has several ways of dealing with this.

How can you disable "set desktop picture" from the finder contextual menu

I teach high school. And MUST find a way to keep my students from changing their desktops.
First I basically got rid of Firefox when it had that feature in the Tiger days.
Then for Leopard I had to create dummy "locked" Safari Desktop Picture files for all my user accounts so the kids couldn't use Safari to set their desktop pictures.
NOW I discover (maybe this was here before) Snow Leopard lets you change the desktop right from the Finder itself! Just right click on any image file and the contextual menu will give them the option to "set desktop picture".
Come on Apple, every educator I know has complained about what a distraction and constant battle images are for students who use computers. While not all students are inappropriate, quite a few are...meaning no one can be allowed the privilege. Why is this such a huge battle to try and lock down? Please allow Parental Controls or Server managed preferences to keep our students from being able to change their desktop pictures, ever, at all, from anywhere or any program.
Does anyone know if this is even possible?

The only way (I have found) to shut down using Safari's "Use Image as a Desktop Picture" feature is to create a bunch of blank documents that the users have no permission to change (i.e. set permission to only allow, say YOU to read it and no access to write to it for anyone)
Create a number of these blank documents and rename them
Safari Desktop Picture.jpg
Safari Desktop Picture.tiff
Safari Desktop Picture.gif
Safari Desktop Picture.jpeg
Safari Desktop Picture.png
(you get the point....come up with as many .3 extensions of photo files that you can think of)
Put these locked and unchangeable files into the following directory of each of your student accounts
Macintosh HD/Users/~User Name/Library/Safari/
What this does is create a bunch of dummy files that will "block" Safari (or the system or user) from trying to replace them. Even though the right click comman will still be there, Safari will not be able to put the picture in the correct part of the system for it to be used as a Desktop Picture.

Most efficient/quickest way to set NTFS permissions in PowerShell

Hello all,
Trying to figure out what the most efficient/quickest way to set NTFS permissions via PowerShell is. I am currently using ICACLS but it is taking FOREVER as I can't figure out how to make inheritance work with this command.
This has prompted me to begin looking at other options for setting NTFS permissions in PowerShell, and I wondered what everyone here likes to use for this task in PowerShell?

Ah ok. Unfortunately, my ICACLS is taking FOREVER. Here is the code I'm using:
ICACLS "C:\users\[user]\Desktop\test" /grant:r ("[user]" + ':r') /T /C /Q
However:
1. I can't figure out how to make the inheritance parameter work with ICACLS
2. If I do make the inheritance parameter work with ICACLS, I still need a way to add the permission to child objects that aren't inheriting.
Any tips on how to improve performance of ICACLS?
1. icacls folder /grant GROUPNAME:(OI)(CI)(F) (i will post corrected code later, this works in CMD but not powershell couse of bracers)
2. get-childitem -recurse -force |?{$_.psiscontainer} |%{icacls ....} (or u can list only folders where inheritance is disabled and apply icacls just on them)
I think jrv and Mekac answered the first question about inheritance flags. I would just add that you probably don't want to use the /T switch with icacls.exe because that appears to set an explicit entry on all child items (that's probably why it's taking
so long).
For your second question, I'd suggest using the Get-Acl cmdlet. It throws terminating errors, so I usually wrap it in a try/catch block. Something like this might work if you just wanted the paths to files/folders that aren't inheriting permissions:
dir $Path -Recurse | ForEach-Object {
try {
Get-Acl $_.FullName | where { $_.AreAccessRulesProtected } | ForEach-Object { Convert-Path $_.Path }
catch {
Write-Error ("Get-Acl error: {0}" -f $_.Exception.Message)
return
If you're looking for speed/performance, you don't want to just use the PowerShell Access Control (PAC) module that Mike linked to above by itself. It's implemented entirely in PowerShell, so it's incredibly slow right now (unless you use it along with Get-Acl
/ see below for an example). I'm slowly working on creating a compiled version that is much faster, and I think I'm pretty close to having something that I can put in the gallery.
Since I wasn't sure which command would give you the best results, I used Measure-Command to test a few different ones. Each of the following four commands should do the exact same thing. Here are my results (note that I just ran the commands a few times
and averaged the results on a test system; this wasn't very rigorous testing):
# Make sure that this folder and user/group exist:
$Path = "D:\TestFolder"
$Principal = "TestUser"
# Native PowerShell/.NET -- Took about 15 ms
$Acl = Get-Acl $Path
$Acl.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule(
$Principal,
"Read", # [System.Security.AccessControl.FileSystemRights]
"ContainerInherit, ObjectInherit", # [System.Security.AccessControl.InheritanceFlags]
"None", # [System.Security.AccessControl.PropagationFlags]
"Allow" # [System.Security.AccessControl.AccessControlType]
(Get-Item $Path).SetAccessControl($Acl)
# PAC Module 3.0 w/ PowerShell/.NET commands -- Took about 35 ms
$Acl = Get-Acl $Path | Add-AccessControlEntry -Principal $Principal -FolderRights Read -PassThru
(Get-Item $Path).SetAccessControl($Acl)
# icacls.exe -- Took about 40ms
icacls.exe $Path /grant "${Principal}:(OI)(CI)(R)"
# PAC Module 3.0 w/o Get-Acl -- Took about 350 ms
Add-AccessControlEntry -Path $Path -Principal $Principal -FolderRights Read -Force
Unless I messed something up, it looks like the native PowerShell/.NET commands are faster than icacls.exe, at least for modifying a single folder's DACL.

For some reason, I cannot change my desktop background no matter how many times I delete the "active" folder. It's as if it's locked. Any ideas how I can fix it?

For some reason, I cannot change my desktop background no matter how many times I delete the "active" folder. It's as if it's locked. Any ideas how I can fix it?

Yes it sounds like you have a corrupted preference file.
The setting you make in individual programs get saved to a Preference file in your Users/Library/Preferences folder.
All you have to do is drag out the old file to the desktop, reboot and load the program and the preference file gets rebuilt without your preferences which you reset.
For your case I beleive the preference file is
com.apple.desktop.plist

Setting up permissions on the file server

I am attempting to set up a file server with the OS X Server that came with my mac mini.
I need to be able to set up permissions for 4 different users to be able to read and write, however with no permission to delete.
I went to the MacMini section (on the left hand corner of the server app), then storage, and from there set up custom permissions
I added the four users as a group.
When I added the group to have access to the needed file, I clicked on the drop downs.
I allowed all permissions for inheritance and reading. I selected all permissions for writting except for "delete" and "Delete subfolders and files"
This give me a "-" sign next to write versus the check symbol (like it was shown for Read and Inheritance)
After I set this up... I went to one of the users to test it out, it would not allow me to drop a file on the server or delete anything.
How do I get this to work the way I want it!?!

You can not do this with a single ACE. Or at least I've never been able to. This shoud resolve.
Please make sure you test this however. Remember that trying to overwrite is a delete and then a write. So if you deny delete, then you can not replace a file or folder with one of the same name. Also, renaming a file is also a delete. You will not be able to rename. Make sure you test this before putting into production to ensure you are getting the behavior you want.
You have a share point named Archive. You have a group called Archive_Users. The Archive_Users are allowed to read and write but NOT delete data in the Archive. Do do this, follow these steps:
1: Create a group called Archive_Users and place your users into the group.
2: Define your share point in File Sharing.
3: Edit to share point to add the group. Press the + button and start typing the group name. When it appears, set the permission to Read Write. You permission window should have 4 entries at this point. The everyone, the group (likely staff), and the owner (likely the server admin). Then the one you added. The bottom three are POSIX, the final one is an ACE.
4: Now, you need to get your hands dirty and create a custom ACE. Server.app does not allow you to use the Deny rules so break out Terminal.
5: I will assume the Archive folder is in this path /Shares/Archive. First get a list of the folder's ACL using:
ls -le /Shares/Archive
It should like like the following:
drwxr-xr-x+ 2 carbon wheel 68 Feb 18 22:27 Archive
0: user:_spotlight inherited allow list,search,file_inherit,directory_inherit
1: group:archive_users allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextat tr,writeextattr,readsecurity,file_inherit,directory_inherit
6: Now you must add your deny rule. Use the following command:
chmod +a# 2 "group:archive_users deny delete,file_inherit,directory_inherit" /Shares/Archive
The syntax here is to add (+a) an ACE at index 2 (# 2), an ACE for the group archive_users that states the group can no delete any file or folder and this is inherited all the way down.
7: If you have content in the folder already, be sure to propagate the permissions.
8: Test, test, test.
Remember, the deny rules can have some odd effects. As mentioned, I can think of the renaming and the overwrite as possible deterrents.
A possible alternative is to not give everyone read write access to the Archive. It might be more sane to define two groups. The first groups, Archive_admins, is a subset of users who are entrusted with moving data to archived status. The second group, Archive_users, is the rest of the team and they have read only access, allowing them to pull data but not edit the archive. This allows you to use two simple ACEs in Server.app: Archive_admin = read/write and Archive_users = read.
R-
Apple Consultants Network
Apple Professional Services
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

My email won't open-it tries and then cuts out. This is occurring with my desktop and laptop. How do it fix this?

my email won't open-it tries and then cuts out. This is occurring with my desktop and laptop. How do it fix this?

Have you tried the usual tune-up practices -
Repair permissions, etc.?

Set windows permissions for folder

My labview app is being installed to the prog files dir for the app by an installer created by the LV Dev System. i encounter a problem when trying to store a config file for the app to the directory during user customization of settings after app installation because the file I am trying to update is read only due to win 7 defaults. I try to set the permissions for the folder programmatically, but it does not change the folder to a NOT read only one. What is the trick here? Do I need to put my config files in another directory somewhere or is ther a way to change the folder settings so I can create temp files in that folder?

Creating temporary config files in Program Files is not very good practice. I would do it in the public user folder.
How are you setting the parameters?
Did you use the following?
http://zone.ni.com/reference/en-XX/help/371361J-01/glang/set_permissions/
http://zone.ni.com/reference/en-XX/help/371361J-01/glang/setting_permissions/
Excerpt from the link above:
You can use permissions to change only write permissions for users (bit 7); the operating system ignores all other changes to the bits.
Beginner? Try LabVIEW Basics
Sharing bits of code? Try Snippets or LAVA Code Capture Tool
Have you tried Quick Drop?, Visit QD Community.

Exchange Online - Set FOLDER permissions recursively in shared mailbox

I posted this in the 365 forums. Reposting here see if it gets any traction. Thanks
I have a shared mailbox that is being used instead of public folders. Having trouble with the folders within the shared mailbox syncing to the various users. Want to move folders out of the shared
mailbox but continually run into errors regarding permissions and I must manually find the offending subfolder and set permissions.<o:p></o:p>
So, I have two questions:<o:p></o:p>
1. How can I configure the shared mailbox so that all folders that are created, regardless of which user creates them, will inherit permissions. Any folder created should automatically have permissions
set to owner for a specific security group.<o:p></o:p>
2. How can I set the permissions on these exisiting shared mailbox folders, recursively (all sub folders) ? I have tried the following:<o:p></o:p>
Get-MailboxFolder –Identity user1:\Folder -Recurse | Add-MailboxFolderPermission -User user2 -AccessRights Owner<o:p></o:p>
But I get an error that the mailbox is not found. I believe that the command above does not work on shared mailboxes.<o:p></o:p>
I also found the following, but can not seem to get it to run. I have tried to run as a ps1 file and directly in powershell - I dont get any errors.<o:p></o:p>
ForEach($f in (Get-MailboxFolderStatistics
[email protected] | Where { $_.FolderPath.Contains("/") -eq $True } ) )
$fname = "[email protected]:" + $f.FolderPath.Replace("/","\"); Add-MailboxFolderPermission $fname -User
[email protected] -AccessRights Owner
Write-Host $fname
Start-Sleep -Milliseconds 1000
}<o:p></o:p>
Any help is appreciated. Thanks<o:p></o:p>

First of all, why don't you just give permissions on the mailbox level instead?
If Office 365, the
Get-MailboxFolder cmdlet only works for you own mailbox. So you have to use the Get-MailboxFolderStatistics as shown in the example. You will need to adjust this to give permissions to the Root folder and its best to actually exclude some of the
folders.
The example below should work, note that there is practically no error handling there, so test it first. Also, if the access entry already exists, you will get error messages.
$mailbox = "[email protected]"
$folders = Get-MailboxFolderStatistics $mailbox | ? {$_.FolderType -ne “Root” -and $_.FolderType -ne “Recoverableitemsroot” -and $_.FolderType -ne “Audits” -and $_.FolderType -ne “CalendarLogging” -and $_.FolderType -ne “RecoverableItemsDeletions” -and $_.FolderType -ne “RecoverableItemspurges” -and $_.FolderType -ne “RecoverableItemsversions”}
Add-MailboxFolderPermission $mailbox -User [email protected] -AccessRights Reviewer #root permissions
foreach ($folder in $folders) {
$FolderPath = $folder.FolderPath.Replace("/","\").Replace([char]63743,"/") #with PowerShell v3 'fix'
$MailboxFolder = "$mailbox`:$FolderPath"
Add-MailboxFolderPermission "$MailboxFolder" -User [email protected] -AccessRights Reviewer

Setting Folder Permissions on a Network Hard Drive

I have an iomega network hard drive (500gb) connected by ethernet directly to my airport extreme. I am the administrator for this home network and have full access to airport settings. I want to set permissions for individual folders on that drive so some users can read and write to them, and some users can only read them. All users need some read/write access to the drive, so I can't simply lock the entire drive. When I open the information screen for a folder on this drive, the "locked" check box will not stay checked, and I have no drop-down options in the permissions area. How do I set permissions for folders on this network drive?

Just giving it a Push;
Same Problem here

Set desktop permissions to 666? How?

Similar Messages

Maybe you are looking for