Set permissions to prevent file deleting

So, I have several iMacs that are basically public computers.  They will all access a shared server.  The machines need to possess all of the user permissions of a "read/write" user with the EXCEPTION of being allowed to delete.  As it is now, a random user could delete our entire server in two clicks.  So, I need to somehow secure our data while still allowing the "reading" and "editing" of files.
•  Somehow disable the delete file function altogether (while still maintaining read/edit permissions)
•  Find some 3rd party app or workaround that prompts the user with a password dialogue box in order to execute the "delete"
•  Somehow apply permissions to a specific folder that enables read/edit, but disables file deleting
Thoughts?

You should post your question in this forum
https://discussions.apple.com/community/servers_enterprise_software/os_x_server
But in a nutshell, using ACL's, you can give people read-write access, but not give them full control (i.e they can't delete.).

Similar Messages

  • How to set permissions to a file ?

    hi,
    i have a requirement to set file permissions and also to get the current permission mode on the file. PLease let me know if there are any inbuilt functions to set permissions to a file. (eg: CHMOD in unix) .
    canRead() and canWrite() are only to get the permission. what about methods to set the permission for a file ? If there are no methods whats the possible way...
    Thanks,
    Sarat

    May be I am not sure but try this
    Runtime.getRuntime().exec("EXecute chmod command here");

  • Prevent file deletion on server but allow read/write permissions

    So, I have several iMacs that are basically public computers.  They will all access a shared server.  The machines need to possess all of the user permissions of a "read/write" user with the EXCEPTION of being allowed to delete.  As it is now, a random user could delete our entire server in two clicks.  So, I need to somehow secure our data while still allowing the "reading" and "editing" of files.
    Here's what I need to do:
    •  Somehow disable the delete file function altogether (while still maintaining read/edit permissions) or
    •  Find some 3rd party app or workaround that prompts the user with a password dialogue box in order to execute the "delete" function or
    •  Somehow apply permissions to a specific folder on the server that enables read/edit, but disables file deleting by users
    I set the permissions of my trash folder to "read only" however, this only prevents deleting local files and doesn't prohibit deleting files from the shared drive.
    Thoughts?

    I'd rethink the requirements.
    The literal answer is that yes, you can mark the files as being undeletable.
    The access control list setting via the command line chmod command is something akin to the following:
    chmod +a "groupname deny delete"
    In practice, these same requirements do allow the shared files to be effectively deleted; via overwrite.  (This is why the Unix-layer file protections don't bother to differentiate write from delete access.)  These requirements also allow partial file corruptions, a situation which tends to be far more pernicious.

  • I only create Read Only folders can't set permissions for any file but mine

    My issue is I have 25 users and an X-Serve and it seems like all the users
    do not have the same permissions. More specifically if a user creates a
    folder on the server only that user can access it. This is the same if the
    user creates the folder on there desktop and then copies the files to the
    server. But if they copy a "read only" folder or file (this happens more
    with files) to there desktop and then they open the file save it and place
    it back on the server there is no problem.
    I also, have a user that whenever she creates a folder it automatically
    set's itself to read only. No matter whether she copies from her desktop to
    the server or visa versa. Every folder she creates is protected this way
    here settings are all the same as everyone else. So I'm not sure if she is
    unique or if the settings for my users are incorrect.
    I did not set up the server or the user's so I'm really trying to catch up
    quick. We are really suffering in that it totally slow's things down almost
    to a crawl in some cases. I really hope you can help me out with this I've
    attached some screen shot's and the X-Serve system profiler for background.
    --

    I suggest posting to the Xerve forum http://discussions.apple.com/forum.jspa?forumID=854

  • Path\x20F prevents file deletion

    I use Pathfinder 6.5 and, starting with Mavericks, I'm getting and error when trying to delete certain files, as opposed to sending them to the Trash. I get the infamous Skip Authenticate Stop dialog box. If I send them to the Trash and then try and empty it, I get the same problem. I use TrashIt to finally delete it.
    The problem seems random, in that it happens with certain files and not others, even from the same directory.
    When I run the command lsof | grep <filename> to see what is holding the file, I find Path\x20F as the (supposed) culprit, but a search for that path or file finds nothing. No PID is reported.
    Does anyone have any idea what this is and how to correct it? I have no external drives connected.

    The file may be in use elsewhere in your program or by another program. Make sure you have closed any streams associated with the file.

  • How to set permissions on a file for a Mac without active Directory

    We don't have our Macs in the Active Directory, we are looking to share an external hard drive to only Macs and not the Windows PC's on the network with out using active directory. I have tested sharing the external hard drive from a PC to everyone and both the PC's and Macs can access this, but we only want the Macs to see this and access this and not everyone. There is no selection for sharing with the computer name in the Share permissions so the only way to do this is to share it to everyone. The Mac accounts are local to the Macs and the PC's are on Active Directory so what i need to do is have a way to share this folder with only Macs and not all the windows PC's. Any solutions, any ideas will help
    Thanks

    hi
    good
    go through these links
    http://help.sap.com/saphelp_nw2004s/helpdata/en/b9/b4de3f68d48f15e10000000a155106/content.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/be/0de03f41b9eb06e10000000a1550b0/content.htm
    thanks
    mrutyun

  • Preventing files form accidentally being deleted

    Is there a way to prevent users from deleting files from an external drive while still allowing for read/write?  Rather than a file being immediately deleted (bypassing the trash can) it goes to a temporary folder where admin deletes it?

    If a user has an external drive connected to their local computer the normal behaviour is that when a file is deleted it is moved in to their own Trash folder. Their own trash folder is located at
    ~/.Trash
    aka.
    /Users/username/.Trash
    If the user is accessing the external drive via a network file server then things are different. In the past there used to be a network trash folder however Apple no longer really support this approach. Instead what happens is that when a user tries to delete a file from the network file server they get a message saying -
    Are you sure you want to delete "name of item"?
    This item will be deleted immediately. You can't undo
    this action.
    If they click the Delete button then the item is as per the message deleted immediately.
    The options are -
    1. Educate users to pay attention to this message
    2. If needed restore from a backup
    3. Set the permissions to allow read, write but not delete. However many applications save files by creating a temporary copy of a file to hold the changes being made, and when you click save they then delete the original file and rename the temporary file to the previous name. This will not work if you set the permissions to disallow file deletion.

  • Set permissions on networked Macs

    I have a MacBook Pro networked with another Pro and a Mac Mini. Is there a way to give each machine read/write access to all files for moving, copying, etc. without having to set permissions for each file/folder? Thanks!

    Hi GoCaps10,
    Yes, you can control the permission with groups, to edit folser permission in powershell, please refer to the cmdlet "Get-ACL" and "Set-ACL":
    $colRights = [System.Security.AccessControl.FileSystemRights]"Read, Write"
    $InheritanceFlag = [System.Security.AccessControl.InheritanceFlags]::None
    $PropagationFlag = [System.Security.AccessControl.PropagationFlags]::None
    $objType =[System.Security.AccessControl.AccessControlType]::Allow
    $objUser = New-Object System.Security.Principal.NTAccount("wingroup\kenmyer")
    $objACE = New-Object System.Security.AccessControl.FileSystemAccessRule `
    ($objUser, $colRights, $InheritanceFlag, $PropagationFlag, $objType)
    $objACL = Get-ACL "C:\Scripts\Test.ps1"
    $objACL.AddAccessRule($objACE)
    Set-ACL "C:\Scripts\Test.ps1" $objACL
    Refer to:
    Working with Security Descriptors
    If there is anything else regarding this issue, please feel free to post back.
    Best Regards,
    Anna Wang

  • Error in setting permissions on file/directory $ORACLE_BASE/jre/1.1.8/LICEN

    Hi,
    On installing Oracle 9.2 on RedHat Linux release 4, I encounterd the
    following error:
    Error in setting permissions on file/directory
    $ORACLE_BASE/jre/1.1.8/LICENSE
    This error is encountered at the inital stage of installation after inputing all the
    required settings in the OUI. and at the Installing Java Runtinme Environment 1.1.8.1.0
    Could someone tell me why it happened and how to fix it? Your help is
    much appreciated.
    There was a post on this topic only in here and said to change the permissions of the
    ORACLE_BASE .......... I have tried out all these and all the permissions and the environment settings are correct but i'm not able to proceed with the installation even after a lot of trying.
    All you guys help is verry verry appreciated..........
    Thanks,

    Do the following and post the results:
    cd $ORACLE_BASE
    pwd
    ls -al
    cd jre
    pwd
    ls -al
    cd 1.18
    pwd
    ls -alI can't imagine anyone making recommendations without seeing what you've done.

  • Error in setting permissions of file/directory

    This is the error I am getting
    Error in setting permissions of file/directory /u01/app/oracle/jre/1.1.8/bin/i686/native_threads/.extract_args
    I am running RedHat 9 and obviously installing 9.2.0.
    Any ideas on why I might be getting this. I have set permissions for the oracle user for this directory.
    Thanks
    Dave

    from root try this command
    umask
    umask must set at 0022 ... if your server not set at this number use this command
    umask 0022

  • Error in setting permissions of file/directory /home/oracle/jre/1.1.8/LICENSE !

    Error in setting permissions of file/directory /home/oracle/jre/1.1.8/LICENSE ! Installation problem of 9i databse on redhat 7.3!!I installed sun jdk 1.3 or jdk 1.1.8_v3 and created a link for /usr/local/java !

    from root try this command
    umask
    umask must set at 0022 ... if your server not set at this number use this command
    umask 0022

  • Set default directory and file permissions

    I'm trying to use setfacl to set the default permissions for directories and files but I get an error saying "sudo: setfacl: command not found." What I am trying to do is share a specific directory on a local external drive connected by Thunderbolt. Everyone in the group has access to the drive and can view all the files but once a new file is created, the group permissions are not updated. Here is an example of two PDF file. The one created by userA only has permissions for that user where the file created by userB allows all users to open and modity the file.
    -rw-------   1 userA    staff   1988176 Feb 13 15:09 TestFile01.pdf
    -rwxr-----+  1 userB  staff   1827102 Feb 13 15:05 TestFile02.pdf
    0: group:MarketingGroup allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity
    I can manually update the permissions through the Get Info window but this requires me to reset permissions every time a person saves a new file to the drive. There needs to be a way to do this automatically.
    Here is what I tried but the setfacl command is not supported.
    sudo setfacl -Rdm g:GroupName:rwx /DirectoryPath

    Thanks Frank. I have an externat drive connected to my Mac via Thunderbolt. On this drive I have a specific directory that I'm shairing with Mac and PC users. I've created a group on the network to limit access to this directory to specific users. That works perfectly. The issue I'm having is when one of these users creates a new file in this directory or any of it's subdirectories, no one has permission to open or edit the file. Right now I'm using Get Info to modify the permissions of the folder and all enclosed items. When I check the permissions of the files I've "corrected" I notice this extra imformation "0: group:MarketingGroup allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity." This is not included when I check the permissions of items saved by other uses in the group.
    So my question is how do I set the default permissions for this directory so every new file and directory will have the correct permissions to allow anyone in this group full access to open and modify every file?
    Thanks for your help!!!!

  • When setting up permissions for application files--URGENT

    Hello All,
    when setting up permissions for application files,
    Is this following permisson appropriate?
    If application files are owned by a single owner,
    that owner should be the oracle user.
    DN

    Here is my question again.
    when setting up permission for application file, which permission is
    appropriate?
    a) If application files are owned by a sigle owner,that owner should be oracle
    user.
    b) Application files should be owned by oracle user
    c) Application files should be owned by single user.

  • I'm trying to share folder between users on a single mac.  I put the folder in "shared," set permissions so other user can read and write, enabled file sharing, but can't find the folder on the second user's account.  Any help?

    I'm trying to share a folder between users on a single mac.  I want both users to be able to read and write so the folder stays current on both accounts.  I put the folder in "shared," set permissions on folder so other user can read and write, enabled file sharing, but can't find the folder on the second user's account.  Any help?

    Did you log out of one account and into the other or just used Fast user switching?
    Is the permissions set to anyone?
    When you move data to teh Shared folder is it copied or just moved?
    If copied then it's not a folder both can access, just a way station like a USB thumb drive that things are coped too and off of likely.
    You can run this #5 on each user account to reset the user permissions once they are taken back out of the Shared folder
    Step by Step to fix your Mac

  • How to set permissions to edit/save files copied from a Win 7 PC

    I'm working on a project where I have to generate a series of screengrabs on a PC and transfer them to my MacPro via the network for onward tranmission via email but some need to be edited first in Photoshop.
    If I'm just forwarding them via email with no changes there's no problem, but when I need to edit them in Photoshop I can't save unless I go to Get Info for the file concerned, unlock Sharing & Permissions (which requires my administrator password) and then change the 'everyone' drop-down setting from 'Read only' to 'Read & Write', then re-lock and close Get Info.
    The default permissions for the PC files as they arrive over the network are:
    nobody     Read & Write
    staff         Read only
    everyone  Read only
    I have dozens and possibly a hundred or more of these to do, so having to re-set Permissions every time is a major pain and waste of time.
    Is there something I can change either on the Mac or the PC (which is running Windows 7) so that I can just edit and save these files without all this hassle?
    Thanks,
    Michael

    http://www.lagentesoft.com/batchmod/ drag and drop permission modification software.  Be careful with this.  If you drag and drop a necessary system folder, you can render your Mac unbootable, except with an EXTERNAL optical drive.

Maybe you are looking for