Other users can access my files
Other users on my mac can view my files on my admin account using spotlight search or using finder. How do I stop this?
MacBook Air 13", macOS 10.14
You can make a difference in the Apple Support Community!
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.
Other users on my mac can view my files on my admin account using spotlight search or using finder. How do I stop this?
MacBook Air 13", macOS 10.14
or using finder.
I'll see about the finder.
Let's look at the permissions on your home folder. may home folder has a name of mac.
first click on your home folder in the sidebar. then command+i to see information on the folder.
We want to go to sharing and permissions. My permissions would cause the problem you site.
You want no access for everyone. You probably want no access for your group.
Here is a file in my home folder. same deal. then command+i to see information on a file.
We want to go to sharing and permissions. My permissions would cause the problem you site.
You want no access for everyone. You probably want no access for your group.
If your file permissions are not correct, we'll have to give you advice on how to change all file permissions.
to change your home folder. click on the double arrow.
post back what you see.
R
or using finder.
I'll see about the finder.
Let's look at the permissions on your home folder. may home folder has a name of mac.
first click on your home folder in the sidebar. then command+i to see information on the folder.
We want to go to sharing and permissions. My permissions would cause the problem you site.
You want no access for everyone. You probably want no access for your group.
Here is a file in my home folder. same deal. then command+i to see information on a file.
We want to go to sharing and permissions. My permissions would cause the problem you site.
You want no access for everyone. You probably want no access for your group.
If your file permissions are not correct, we'll have to give you advice on how to change all file permissions.
to change your home folder. click on the double arrow.
post back what you see.
R
Where are the files that they can see?
They should not be able to see files in Documents, Desktop, etc.
If you created folders directly inside the home directory, then the default permissions allow others to see them unless you change the permissions on those folders.
If that is the case, you need to change the permissions on those folders so that they look like the permissions on your Documents or Movies folders.
If they can see files inside the Documents, Movies, or other folders inside your home besides Public, then the permissions may be wrong on your Home directory. This may help: Resolve issues caused by changing the permissions of items in your home folder - Apple Support
Specify just the execute bit on the directory.
before messing around, I have a full backup of your system, maybe two.
create a new user to play with.
Unix navigation commands.
https://discussions.apple.com/docs/DOC-11071
And it looks like you will need to do this from the terminal.
so I would try 710
7 let your read directory, write files to the directory, and descend directory
1 for users in the group they will be able to descend to directories below.
0 everyone else cannot do squat.
creating the folders
mac $ cd videotest/
/Users/mac/videotest
mac $ mkdir subfolder
mac $ ls -ld subfolder/
drwxr-xr-x 2 mac staff 68B May 17 20:52 subfolder//
mac $ cd subfolder
/Users/mac/videotest/subfolder
mac $ mkdir sub#2folder
mac $ ls -ld sub#2folder/
drwxr-xr-x 2 mac staff 68B May 17 20:53 sub#2folder//
mac $ cd sub#2folder/
/Users/mac/videotest/subfolder/sub#2folder
mac $ touch a
mac $ touch b
mac $ cd ..
/Users/mac/videotest/subfolder
mac $ cd ..
/Users/mac/videotest
mac $ ls
echo if one* subfolder/ then two*
chmod for just the execution bit.
mac $ chmod 100 subfolder/
mac $ ls -l subfolder/
ls: : Permission denied
mac RC=1 😱 $ sudo ls -l subfolder/
total 0
drwxr-xr-x 4 mac staff 136 May 17 20:53 sub#2folder
mac $ sudo ls -ld subfolder/
d--x------ 3 mac staff 102 May 17 20:53 subfolder/
#while I connot see what is in subfolder, I can descend.
mac $ ls -l subfolder/sub#2folder
total 0
-rw-r--r-- 1 mac staff 0B May 17 20:53 a
-rw-r--r-- 1 mac staff 0B May 17 20:53 b
mac $ ls -l subfolder/
ls: : Permission denied
mac RC=1 😱 $
superastronomical wrote:
Other users on my mac can view my files on my admin account using spotlight search or using finder. How do I stop this?
https://www.tekrevue.com/tip/three-ways-to-prevent-spotlight-from-indexing-items-on-your-mac/
When you make a new folder, it inherits the permission of the enclosing folder.
The Home folder allows Staff and everone to read as it has a Public folder and the Sites folder (if you've used that).
Both of those must be accessible to everyone.
So, any new folder you make at the root level of the Home folder gets read permissions for everyone. You need to adjust the permissions on those folders by removing the group and setting everyone to no access.
I have tried this but it didn't work. For example i have movie files I wish to share with other users which I had put into a shared folder. However I downloaded my icloud photos to my macbook and when i type .mov using another user my icloud files i downloaded i.e. vids from my iphone come up
update: I did it last night but did not work, but retried it then and it did. I didn't press the locked button but assumed you didn't have to as it allowed me to make changes before putting my password in. After unlocking it I had to then lock it again and it worked. Thanks guys
at least in Unix, there was some attribute for a directory that allowed you pass down the directory tree, but not read a skipped directory. It's been awhile. Is there something like that in macOS?
It should likely work like Unix as that is the underpinnings, but I did create a user, removed the group from the account and set everyone to no access and couldn't get to Public through the Terminal.
I also couldn't find any reference for what you describe.
Kind of crazy to have files in the home folder shared. You have any idea of the rational for that?
R
at least in Unix, there was some attribute for a directory that allowed you pass down the directory tree, but not read a skipped directory. It's been awhile. Is there something like that in macOS?
R
Other users can access my files