"Have you tried repairing permissions?" is a standard Mac troubleshooting tip that's been floating around the web forever. For many users, this seemed to solve many rare type of problems. But when Bone 10 El Capitan (10.xi) released, the Repair Deejay Permission choice suddenly vanished from the Deejay Utility app.

Does that mean Apple has solved the permission-related problems in macOS, or was it something else? We'll unravel this mystery and evidence yous how disk permissions work on your Mac.

How Permissions Work in macOS

Every item on your Mac, whether it's a file or folder, carries a set of permissions. These control which user accounts can access it and what kind of access they take. Permissions consist of iii activities (read, write, and execute), performed by three types of user (possessor, group, and everyone).

You tin can ascertain privilege rules separately for each ownership tier. Permission, in combination with accounts and buying, provides you security, enables controlled sharing, can set limited or no access to files, and maintains organization integrity.

View File System Permissions

Any user can view the file and folder permissions using Finder's Info window or the Terminal. In Finder, right-click a file or folder and cull Go Info from the context carte du jour. Click the Sharing & Permissions triangle to aggrandize the item permissions.

choose get info from the finder window

To view this information in the Terminal, type the following:

          ls -50 "path to your file"

The character after the nuance is a lowercase L and reveals the buying and permission of your file. On the command line, the abbreviation for the read permission is r, while write is westward, and execute is 10.

view permission of an item in terminal

Owner, Group, and Anybody

Permit's break downwardly the three types of users that appear in Mac permission fields:

  • Possessor: An detail owner is a user who creates the item or copied information technology to the Mac. Users usually ain most of the items in their home folder.
  • Grouping: Every item is too owned by a group. A grouping is a set of user accounts joined together so permissions can apply to all members.
  • Everyone: Use this permission setting to define access for anyone, including local, sharing, and guest users.

Read, Write, and Execute

Side by side, permit'south wait at the three types of permissions these users tin have:

  • Read: User or group members tin open a file but can't save changes. If it's a folder, you tin can browse the list of items.
  • Write: User or group members can modify or delete the file. For a folder, you tin can make changes to folder contents.
  • Execute: Files with the execute permission tin behave every bit a program or script. In instance of a folder, execute ways someone tin list its contents provided the read permission is also enabled.

Factors That Crusade Permission Problems

In Bone X Yosemite and earlier, Deejay Utility can verify and repair permissions on some files and folders. However, in authenticity, the app doesn't repair permissions. It only resets them.

Further, to say Deejay Utility repairs permissions makes it sound like permissions can become bad or become corrupted over time. Just this is not true. Permissions stay the same until something or someone comes forth and changes them. There are many reasons this tin can happen:

  1. App Installers: Some installers change permissions on existing items as a necessary part of the installation process, merely fails to return them to the proper settings.
  2. User error: If y'all're fiddling with permissions in the Terminal or through a 3rd-political party app, mistakes can lead to problems. For example, improper use of the chmod command can alter the permission setting of an item.
  3. Sharing a folder: All users on the computer have permission to access items in the Shared folder. If y'all're using this folder as a repository for files in transit, then permission problems are unlikely. But if you lot store items for use by multiple people on a permanent basis, then problems can arise.
  4. Permissions on Copied Items: It's difficult to predict what permissions macOS volition assign when you re-create files over an external book, SMB, or FTP. You may need to employ some trial and mistake to solve this problem.

What Happened After Os Ten El Capitan?

In Os X El Capitan, Apple introduced Organisation Integrity Protection (SIP) to all system files, folders, and even bundled apps. It protects organisation contents from intentional and inadvertent tampering while also preserving default permission settings. SIP protects the following directories: /System, /usr, /bin, and /sbin.

When y'all update Apple apps or upgrade macOS, the installer volition check and reset the permissions of any detail if necessary. No third-political party app (irrespective of its lousy behavior) can modify permissions unless you lot disable SIP. Nosotros've dug into more about what SIP does if you're curious.

What About the User and Dwelling house Folders?

Organization Integrity Protection does non protect items in the /Library binder, apps in /Applications, and everything in your Domicile folder. The ~/Library folder is especially important, because information technology consists of core system preference files, third-political party app preferences, Keychain data, and more.

If the permissions were changed to any of these files or folders, you can wait a multitude of bizarre of issues on your Mac. Issues that can ascend due to incorrect permissions include:

  • Changes that you make to Finder, System Preferences, or the Dock practice not become saved.
  • Windows that were open up the last time yous logged out or quit an app open once more after you log in.
  • You're asked for an administrator password while moving certain items in the Home binder.
  • You repeatedly become a message saying "macOS needs to repair your Library to run applications."
  • When saving a file, you lot'll get a bulletin that a file is locked or don't take the necessary permissions. This happens a lot with Microsoft Role documents.
  • Default or third-party apps could crash on launch. Some apps might fifty-fifty fail to update.
  • Firefox or Chrome does not load your preferences and says "Unable to load your contour."
  • Photos and videos you import into Photos don't announced in the app. Or yous go a message to select a default Photos library every fourth dimension y'all open up the app.

Reset Permissions for the Home Folder

From the Finder sidebar, right-click your Domicile folder and choose Go Info. Click the Sharing & Permissions dropdown triangle to view its permissions.

choose get info from the finder window

Click the Lock push button at the bottom of the window and enter your administrator password. Then select the activity menu button and choose Utilise to enclosed items.

choose apply to enclosed items from the action menu

Click OK to ostend the action. The updated permissions will propagate through your Home folder.

click OK to apply the permission setting

Next, open the Terminal app and type the following:

          diskutil resetUserPermissions / `id -u`

This choice resets the user permission on the root volume (/) to the current user ID. If everything goes well, reboot your Mac.

Merely if you get error 69841, and then follow these steps:

On macOS High Sierra or Earlier

  1. Open the Terminal app and enter the following: 
                  chflags -R nouchg ~
  2. So enter this command once more: 
                  diskutil resetUserPermissions / `id -u`
  3. Restart your Mac.

On macOS Mojave and Later

The steps for Mojave and newer are the same as the above, only you must add Terminal to Full Disk Access before proceeding. To do this, go to Organisation Preferences > Security & Privacy and click the Privacy tab. Click the Lock icon and enter your ambassador password to make changes.

select full disk access from system preferences

Next, select the Total Deejay Admission tab. Then click the Plus button and add together the Final app.

add terminal app to full disk access

After doing this, go on through the to a higher place Terminal commands mentioned for Loftier Sierra and earlier.

Understanding Mac User Accounts

When the option to repair disk permissions vanished from the Disk Utility app, we didn't remember much of information technology considering it was never an important troubleshooting pace. But seeing the blazon of problems yous might encounter because of incorrect permissions, information technology'south clear that resetting permissions for your Home folder is the final resort when these issues crop upward.

Information technology's surprising to come across that Apple doesn't include this pick anymore. Merely call up, you lot should merely employ these steps when necessary. Understanding permissions is a circuitous topic. If you lot understand how macOS user accounts work, information technology'll get a lot simpler. Read this guide to setting up multiple user accounts on a Mac to learn more.

Why You Need to Delete Zombie Apps You No Longer Utilise

Read Adjacent

Most The Author

Rahul Saigal (177 Articles Published)

With his G.Optom Degree in Centre Care Speciality, Rahul worked as a lecturer for many years in the college. Writing and teaching others is always his passion. He now writes about technology and brand it digestible for readers who don't sympathise it well.

More From Rahul Saigal