Tessellate a+d

Q: How to clean up permissions Mac Server issue

I am having some very frustrating issues with permissions in shared group folders on mac server. When i create a new set of permissions at the top of the folder tree and then propagate them it seems to just create another copy of permissions into all of the folders beneath the root rather than deleting the previous permissions and writing the ones I want to set up. In other words i am ending up with several sets of permissions per user for each folder and file.

 

So the question i am trying to ask is how do i clean up all of these permissions from all of the folders and files and start afresh?

 

The main issues that i am having is that I even with full administrative rights am getting denied permission to open files and save to the server.

 

My server is running OS X El Capitan 10.11.4 , mac server version 5.1

Mac mini, OS X El Capitan (10.11.4)

Posted on Jun 6, 2016 10:08 PM

Close

Q: How to clean up permissions Mac Server issue

  • All replies
  • Helpful answers

  • by Strontium90,Solvedanswer

    Strontium90 Strontium90 Jun 7, 2016 11:55 PM in response to Tessellate a+d
    Level 5 (4,077 points)
    Servers Enterprise
    Jun 7, 2016 11:55 PM in response to Tessellate a+d

    The easiest (and usually the quickest) way to clean up you permissions is to use the chmod command from Terminal.  If your ACLs are multiplying uncontrollably (please not that certain versions of Office for Windows used to cause this) you might want to quickly remove all ACLs and then start over.  To do this, follow these steps:

     

    1:  Stop all file services to ensure that no one is altering data while you are working on it.

    2:  Remove all ACLs using this command (replace with actual path to data):

         sudo chmod -R -N /path/to/your/share

     

    This will remove all ACLs from all files and folders in /path/to/your/share and recurse to everything in the folder.

     

    Now, if you think your POSIX permissions are out of whack, you can also reset this with two handle commands.  To reset all directories to standard umask, use:

         sudo find /path/to/your/share -type d -exec chmod 755 {} \;

     

    To reset all files to standard umask, use:

         sudo find /path/to/your/share -type f -exec chmod 644 {} \;

     

    Note:  Your permissions model may be more restrictive and some workflows rely on limiting via POSIX.  If so, these commands make not be what you want.

     

    And there you have it.  The above three commands can remove all ACLs and set all folders to 755 (drwxr-xr-x) and all files to 644 (-rw-r--r--).

     

    Once you reset the data, go back to Server.app > Sharing or Server.app > Server > Storage and assign your permissions.

     

    Reid

    Apple Consultants Network

    Author - "El Capitan Server – Foundation Services"

    Author - "El Capitan Server – Control & Collaboration"

    Author - "El Capitan Server – Advanced Services"

    :: Exclusively available in Apple's iBooks Store

  • by Tessellate a+d,

    Tessellate a+d Tessellate a+d Jun 7, 2016 11:57 PM in response to Strontium90
    Level 1 (4 points)
    Servers Enterprise
    Jun 7, 2016 11:57 PM in response to Strontium90

    Thanks so much strontium90!!

     

    All fixed.

     

    Your help has been much appreciated as well as your clear and well considered instructions.

     

    Cheers

  • by Strontium90,

    Strontium90 Strontium90 Jun 8, 2016 4:55 AM in response to Tessellate a+d
    Level 5 (4,077 points)
    Servers Enterprise
    Jun 8, 2016 4:55 AM in response to Tessellate a+d

    Glad to help.  Keep those servers running smooth!