Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #75456 > unrolled thread

Privileges

Back to article view | Back to comp.sys.mac.system

Contents

  Privileges Steve <s.s.kievits@gmail.com> - 2015-05-12 09:40 -0700
    Re: Privileges Alan Baker <email@domain.com> - 2015-05-12 09:51 -0700
      Re: Privileges me@home.spamsucks.ca (Király) - 2015-05-13 03:20 +0000
        Re: Privileges Steve <s.s.kievits@gmail.com> - 2015-05-15 00:00 -0700
      Re: Privileges s.s.kievits@gmail.com - 2015-05-13 02:44 -0700
      Re: Privileges Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-05-13 13:21 +0000
        Re: Privileges s.s.kievits@gmail.com - 2015-05-15 00:04 -0700
      Re: Privileges s.s.kievits@gmail.com - 2015-05-14 23:59 -0700
        Re: Privileges me@home.spamsucks.ca (Király) - 2015-05-17 01:59 +0000
          Re: Privileges Steve <s.s.kievits@gmail.com> - 2015-05-18 03:06 -0700
      Re: Privileges s.s.kievits@gmail.com - 2015-05-15 00:16 -0700

#75456 — Privileges

When editing and trying to save a file I created a couple of days ago I was asked for the administrator password. Files usually have the following privileges:

user (Me) Read & Write
staff Read only
everyone Read only

Now there is another 'everyone' (above user) with "Custom" privileges. The folders are good with drwxr-xr-x privileges, but the files have -rw-r--r--@ privileges. I get these messages:

"The document "file.JPG" could not be saved. The file is locked." and 
"You don't have permission to save the file "file.JPG".", although I am the only one with Read & Write privileges. I don't know what the Custom privileges are.

Privileges in other accounts are OK.

It can probably fixed with a CHMOD command, but which one? I only want to remove to extra "everyone Custom" setting, but can't do so using "Get Info", because the - buttons are greyed out (even when unlocked). Only staff can be removed with the - button if I want to.

TIA,
Steve.

I'm on Mavericks 10.9.5

[toc] | [next] | [standalone]

#75458

On 2015-05-12 16:40:17 +0000, Steve said:

> When editing and trying to save a file I created a couple of days ago I 
> was asked for the administrator password. Files usually have the 
> following privileges:
> 
> user (Me) Read & Write
> staff Read only
> everyone Read only
> 
> Now there is another 'everyone' (above user) with "Custom" privileges. 
> The folders are good with drwxr-xr-x privileges, but the files have 
> -rw-r--r--@ privileges. I get these messages:
> 
> "The document "file.JPG" could not be saved. The file is locked." 
> and"You don't have permission to save the file "file.JPG".", although I 
> am the only one with Read & Write privileges. I don't know what the 
> Custom privileges are.
> 
> Privileges in other accounts are OK.
> 
> It can probably fixed with a CHMOD command, but which one? I only want 
> to remove to extra "everyone Custom" setting, but can't do so using 
> "Get Info", because the - buttons are greyed out (even when unlocked). 
> Only staff can be removed with the - button if I want to.
> 
> TIA,
> Steve.
> 
> I'm on Mavericks 10.9.5

First, use the command "ls -lae" on the file and see exactly what the 
full permissions including access control list entries are.

Copy and paste in your reply.

[toc] | [prev] | [next] | [standalone]

#75500

Alan Baker <email@domain.com> wrote:
> First, use the command "ls -lae" on the file and see exactly what the 
> full permissions including access control list entries are.

Also tell us what app you are trying to save with, and into which 
folder.

-- 
K.

Lang may your lum reek.

[toc] | [prev] | [next] | [standalone]

#75695

On Wednesday, May 13, 2015 at 5:21:47 AM UTC+2, Király wrote:
> Alan Baker <email@domain.com> wrote:
> > First, use the command "ls -lae" on the file and see exactly what the 
> > full permissions including access control list entries are.
> 
> Also tell us what app you are trying to save with, and into which 
> folder.
> 
> -- 
> K.
> 
> Lang may your lum reek.

Preview
/Users/user/Documents/Folder/Subfolder1/Subfolder2
drwxr-xr-x+ 10 user  staff     340 13 Mai 14:42 Subfolder2



Cheers,
Steve.

[toc] | [prev] | [next] | [standalone]

#75503

On Tuesday, May 12, 2015 at 6:51:25 PM UTC+2, Alan Baker wrote:
> On 2015-05-12 16:40:17 +0000, Steve said:
> 
> > When editing and trying to save a file I created a couple of days ago I 
> > was asked for the administrator password. Files usually have the 
> > following privileges:
> > 
> > user (Me) Read & Write
> > staff Read only
> > everyone Read only
> > 
> > Now there is another 'everyone' (above user) with "Custom" privileges. 
> > The folders are good with drwxr-xr-x privileges, but the files have 
> > -rw-r--r--@ privileges. I get these messages:
> > 
> > "The document "file.JPG" could not be saved. The file is locked." 
> > and"You don't have permission to save the file "file.JPG".", although I 
> > am the only one with Read & Write privileges. I don't know what the 
> > Custom privileges are.
> > 
> > Privileges in other accounts are OK.
> > 
> > It can probably fixed with a CHMOD command, but which one? I only want 
> > to remove to extra "everyone Custom" setting, but can't do so using 
> > "Get Info", because the - buttons are greyed out (even when unlocked). 
> > Only staff can be removed with the - button if I want to.
> > 
> > TIA,
> > Steve.
> > 
> > I'm on Mavericks 10.9.5
> 
> First, use the command "ls -lae" on the file and see exactly what the 
> full permissions including access control list entries are.
> 
> Copy and paste in your reply.

Sure, will be tomorrow earliest. I can only check internet once a day at the @Cafe.

Cheers,
Steve.

[toc] | [prev] | [next] | [standalone]

#75508

In message <mitb2b$3lk$1@news.datemas.de> 
  Alan Baker <email@domain.com> wrote:
> On 2015-05-12 16:40:17 +0000, Steve said:

>> When editing and trying to save a file I created a couple of days ago I 
>> was asked for the administrator password. Files usually have the 
>> following privileges:
>> 
>> user (Me) Read & Write
>> staff Read only
>> everyone Read only
>> 
>> Now there is another 'everyone' (above user) with "Custom" privileges. 
>> The folders are good with drwxr-xr-x privileges, but the files have 
>> -rw-r--r--@ privileges. I get these messages:
>> 
>> "The document "file.JPG" could not be saved. The file is locked." 
>> and"You don't have permission to save the file "file.JPG".", although I 
>> am the only one with Read & Write privileges. I don't know what the 
>> Custom privileges are.
>> 
>> Privileges in other accounts are OK.
>> 
>> It can probably fixed with a CHMOD command, but which one? I only want 
>> to remove to extra "everyone Custom" setting, but can't do so using 
>> "Get Info", because the - buttons are greyed out (even when unlocked). 
>> Only staff can be removed with the - button if I want to.
>> 
>> TIA,
>> Steve.
>> 
>> I'm on Mavericks 10.9.5

> First, use the command "ls -lae" on the file and see exactly what the 
> full permissions including access control list entries are.

> Copy and paste in your reply.

Also, ls -ls@

It says the file is locked. Probably, the file is locked. ⌘I and untick
the "lock" checkbox.



-- 
"Queen Isabella and King Ferdinand kicked 200,000 Jews out of Spain, one
of the first acts of the Spanish Inquisition, which no one ever expects
" -- John Carroll's 21st Annual Xmas Quiz answers

[toc] | [prev] | [next] | [standalone]

#75696

On Wednesday, May 13, 2015 at 3:22:21 PM UTC+2, Lewis wrote:
> In message <mitb2b$3lk$1@news.datemas.de> 
>   Alan Baker <email@domain.com> wrote:
> > On 2015-05-12 16:40:17 +0000, Steve said:
> 
> >> When editing and trying to save a file I created a couple of days ago I 
> >> was asked for the administrator password. Files usually have the 
> >> following privileges:
> >> 
> >> user (Me) Read & Write
> >> staff Read only
> >> everyone Read only
> >> 
> >> Now there is another 'everyone' (above user) with "Custom" privileges. 
> >> The folders are good with drwxr-xr-x privileges, but the files have 
> >> -rw-r--r--@ privileges. I get these messages:
> >> 
> >> "The document "file.JPG" could not be saved. The file is locked." 
> >> and"You don't have permission to save the file "file.JPG".", although I 
> >> am the only one with Read & Write privileges. I don't know what the 
> >> Custom privileges are.
> >> 
> >> Privileges in other accounts are OK.
> >> 
> >> It can probably fixed with a CHMOD command, but which one? I only want 
> >> to remove to extra "everyone Custom" setting, but can't do so using 
> >> "Get Info", because the - buttons are greyed out (even when unlocked). 
> >> Only staff can be removed with the - button if I want to.
> >> 
> >> TIA,
> >> Steve.
> >> 
> >> I'm on Mavericks 10.9.5
> 
> > First, use the command "ls -lae" on the file and see exactly what the 
> > full permissions including access control list entries are.
> 
> > Copy and paste in your reply.
> 
> Also, ls -ls@
> 
> It says the file is locked. Probably, the file is locked. ⌘I and untick
> the "lock" checkbox.
> 
> 
That check-box is greyed out. Only 'staff' can be deleted with the minus button if I want. And it is not for just one file, but for most files in that account.

I'd like a global command for the account.

Thanks,
Steve.

[toc] | [prev] | [next] | [standalone]

#75694

On Tuesday, May 12, 2015 at 6:51:25 PM UTC+2, Alan Baker wrote:
> On 2015-05-12 16:40:17 +0000, Steve said:
> 
> > When editing and trying to save a file I created a couple of days ago I 
> > was asked for the administrator password. Files usually have the 
> > following privileges:
> > 
> > user (Me) Read & Write
> > staff Read only
> > everyone Read only
> > 
> > Now there is another 'everyone' (above user) with "Custom" privileges. 
> > The folders are good with drwxr-xr-x privileges, but the files have 
> > -rw-r--r--@ privileges. I get these messages:
> > 
> > "The document "file.JPG" could not be saved. The file is locked." 
> > and"You don't have permission to save the file "file.JPG".", although I 
> > am the only one with Read & Write privileges. I don't know what the 
> > Custom privileges are.
> > 
> > Privileges in other accounts are OK.
> > 
> > It can probably fixed with a CHMOD command, but which one? I only want 
> > to remove to extra "everyone Custom" setting, but can't do so using 
> > "Get Info", because the - buttons are greyed out (even when unlocked). 
> > Only staff can be removed with the - button if I want to.
> > 
> > TIA,
> > Steve.
> > 
> > I'm on Mavericks 10.9.5
> 
> First, use the command "ls -lae" on the file and see exactly what the 
> full permissions including access control list entries are.
> 
> Copy and paste in your reply.

Sorry for the delay...

-rw-r--r--@  1 user (Me)  staff   555176  1 Mai 21:53 file.jpg
 0: group:everyone deny delete


Also tell us what app you are trying to save with, and into which
folder.

Preview
/Users/user/Documents/Folder/Subfolder1/Subfolder2
drwxr-xr-x+ 10 user  staff     340 13 Mai 14:42 Subfolder2



Cheers,
Steve.
-- 
K.

Lang may your lum reek. 

[toc] | [prev] | [next] | [standalone]

#75826

s.s.kievits@gmail.com wrote:
> Sorry for the delay...
> 
> -rw-r--r--@  1 user (Me)  staff   555176  1 Mai 21:53 file.jpg
>  0: group:everyone deny delete
> Preview
> /Users/user/Documents/Folder/Subfolder1/Subfolder2
> drwxr-xr-x+ 10 user  staff     340 13 Mai 14:42 Subfolder2

Can you save to that folder using a different app? I suspect Preview's 
auto save feature might be acting up and trying to save to a 
non-writable temp folder before moving the final product to the desired 
folder.

-- 
K.

Lang may your lum reek.

[toc] | [prev] | [next] | [standalone]

#75860

On Sunday, May 17, 2015 at 4:00:46 AM UTC+2, Király wrote:
> s.s.kievits@gmail.com wrote:
> > Sorry for the delay...
> > 
> > -rw-r--r--@  1 user (Me)  staff   555176  1 Mai 21:53 file.jpg
> >  0: group:everyone deny delete
> > Preview
> > /Users/user/Documents/Folder/Subfolder1/Subfolder2
> > drwxr-xr-x+ 10 user  staff     340 13 Mai 14:42 Subfolder2
> 
> Can you save to that folder using a different app? I suspect Preview's 
> auto save feature might be acting up and trying to save to a 
> non-writable temp folder before moving the final product to the desired 
> folder.
> 
> -- 
> K.
> 
> Lang may your lum reek.

Yes, saving is OK for all apps, just existing documents are affected. More...

Long story. I'll try to keep it short. Quotes are from Topher Kessler articles (CNET).

"Depending on the severity of the corruption, troubleshooting and fixing the problems may sometimes be more effort than it's worth, with creating a fresh account being a quicker workaround,.."
Movies and Pictures were good. I copied them to the Public folder of the 'wrong' account. From the new account I dragged them to their new locations. This way the new account became the owner. Permissions of the Documents were mostly wrong. Using the first method didn't work; still the 'everyone, Custom'  privilege. I used SuperDuper to backup Documents to an external partition without the ACLs. Again dragged the files and folders to the new account. The new account was owner of all data.
All was well, deleted data of old account and started using new account. Switched Time Machine back on. Two backups were made. I used Yasu to clear caches, swap files, archived logs of the old account. Rebooted. The OS didn't like that. Only the SuperDuper disk was available as boot disk. I tried the following..
".., reboot and hold Command-R to load the OS X Recovery HD partition. After selecting your language, choose Terminal from the Utilities menu and run the command "resetpassword" (all one word, and lower-case) to launch the password reset tool. In this tool, select your hard drive, then the new user account, and then choose the option to reset home folder permissions and ACLs."
Did that for the "wrong" account and restored from the last Time Machine backup.

Strangely the system was restored to the previous state with the old account and an empty new account (??), but with the correct privileges. It beats me, but it looks OK and both old and new accounts are very snappy.

But, it is not OK, because OS is booting from the SuperDuper backup and not McIntosh HD. Trying to restore from a TM backup doesn't help. OS won't see the Hard disk. I'll figure it out. No panic, nothing is lost. Just a pain.

Hope I didn't bore you.
Thanks,
Steve.

[toc] | [prev] | [next] | [standalone]

#75697

On Tuesday, May 12, 2015 at 6:51:25 PM UTC+2, Alan Baker wrote:
> On 2015-05-12 16:40:17 +0000, Steve said:
> 
> > When editing and trying to save a file I created a couple of days ago I 
> > was asked for the administrator password. Files usually have the 
> > following privileges:
> > 
> > user (Me) Read & Write
> > staff Read only
> > everyone Read only
> > 
> > Now there is another 'everyone' (above user) with "Custom" privileges. 
> > The folders are good with drwxr-xr-x privileges, but the files have 
> > -rw-r--r--@ privileges. I get these messages:
> > 
> > "The document "file.JPG" could not be saved. The file is locked." 
> > and"You don't have permission to save the file "file.JPG".", although I 
> > am the only one with Read & Write privileges. I don't know what the 
> > Custom privileges are.
> > 
> > Privileges in other accounts are OK.
> > 
> > It can probably fixed with a CHMOD command, but which one? I only want 
> > to remove to extra "everyone Custom" setting, but can't do so using 
> > "Get Info", because the - buttons are greyed out (even when unlocked). 
> > Only staff can be removed with the - button if I want to.
> > 
> > TIA,
> > Steve.
> > 
> > I'm on Mavericks 10.9.5
> 
> First, use the command "ls -lae" on the file and see exactly what the 
> full permissions including access control list entries are.
> 
> Copy and paste in your reply.

See earlier. I thought it had something to do with me changing permissions on a couple of files or a folder containing MP3 files. iTunes couldn't import them, because they were from a different account. owner. After changing permissions all was OK. Looking further back in time I saw that most, if not all, have the extra 'everyone, Custom' settings. Using BatChmod I can clearly see the settings of individual files and folders and change them. Even clear the ACL's, which seem to work for test files.

Like I said, the folders themselves are and newly saved files have the correct permissions. Just suddenly existing files can't be saved...or deleted without the admin password (I work of standard accounts).

Anyway, an old security configuration file for Snow Leopard gives a lot of information about POSIX and ACL, but only for single files.

Thanks,
Steve.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.sys.mac.system

csiph-web