Why are accessibility settings being ignored

I regularly have to visit Accessibility settings in macOS for certain apps (e.g. Typinator and BetterSnapTool) to turn the setting off and back on again.




I am using macOS Ventura 13.6.7 on a 2017 Intel-based iMac 18,3.


According to the app developers, the issue lies with macOS:


Why does Typinator fail to work?

There is a bug of macOS’s handling of application permissions, which can prevent some applications (such as Typinator) to work properly. Sometimes it can happen that the permissions get lost, although they are selected in the system preferences.


Excerpt from: https://ergonis.com/typinator/faq


The above issue has remained unresolved now for many months. Is there anything one can do for Apple to finally address this problem or does anyone know of a way to permanently fix the issue (without removing the apps!) ?

iMac 27″ 5K, macOS 13.6

Posted on Jun 18, 2024 9:54 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 27, 2024 6:10 PM

numbles45 wrote:

The interesting question that you seem to have skipped was: "the apps and System Preferences aren't querying the TCC permissions from the same database. How can that be?"

There's only one database to query. However, there may be multiple apps. For example, many modern apps are "electron" apps. They consist of an HTML web browser wrapper around a cross-platform core. Even if they aren't truly "electron", sometimes apps use a similar strategy with a native UI wrapper around what is essentially a command-line tool. When they do this, those are multiple apps. Which one gets the TCC permissions? (That's a rhetorical question, by the way. No one knows the answer, including the developer.)


Your response from BetterSnapTool is pretty good:

It can also happen if the code signature of an app changes for whatever reason (e.g. buggy update, broken disk, some other software that „accidentally“ breaks the signature). At least for BetterSnapTool the code signature hasn’t changed through updates.

There are a lot of those "whatever reasons". And it just so happens that these kinds of "haxie" tools are more likely than most to employ these techniques. So, in addition to what I mentioned above, consider some of these other scenarios:

buggy update - Any kind of auto-update mechanism is likely to trigger this. In theory, it is possible to update an app and its signature. It just doesn't happen bloody often.

broken disk - I have no idea what they are talking about there.

some other software that "accidentally" breaks the signature - All kinds of possibilities here. Ironically enough, some of these are these same system modification apps that are so popular. Monolingual will remove "foreign" (i.e. non-English) language from apps - breaking the signature. Little Snitch can interfere with virtually everything. Any kind of "security" software can cause similar problems.


Apple's Gatekeeper software lives up to its name. It checks an app's signature after an app has been first downloaded. But after that, Apple typically doesn't verify signatures. Apps also typically don't verify their signature either. So if a signature becomes invalid for whatever reason, nobody is going to know. But something like TCC that double-checks signatures is going to be the one to find it. Plus, sometimes these apps may try some tricks to avoid Gatekeeper problems. That's good for avoiding Gatekeeper problems, but not for avoiding TCC problems.


I’d really like to know whether this is something that needs to be addressed by Apple or if app developers are missing something here and need to be helped.

Does it matter? Whether the ultimate cause is Apple or 3rd party developers, there's nothing you can do to affect any change. Apple's software could very well have bugs. So could 3rd party apps. Every app is different. Can you use command line tools to hack around on the database and fix it for a time? Maybe.


I think one thing you can do is be careful with auto-updates for these kinds of apps. I think that would go a long ways towards alleviating this problem. Next time one breaks during an update, make a note of it. Uninstall the app completely, restart, then reinstall. I suspect you might find that certain apps are more likely to exhibit this particular problem than others. If that happens, then you might lean a little bit closer towards it being the fault of 3rd party developers. But still, it won't really mean anything.

22 replies
Question marked as Top-ranking reply

Jun 27, 2024 6:10 PM in response to numbles45

numbles45 wrote:

The interesting question that you seem to have skipped was: "the apps and System Preferences aren't querying the TCC permissions from the same database. How can that be?"

There's only one database to query. However, there may be multiple apps. For example, many modern apps are "electron" apps. They consist of an HTML web browser wrapper around a cross-platform core. Even if they aren't truly "electron", sometimes apps use a similar strategy with a native UI wrapper around what is essentially a command-line tool. When they do this, those are multiple apps. Which one gets the TCC permissions? (That's a rhetorical question, by the way. No one knows the answer, including the developer.)


Your response from BetterSnapTool is pretty good:

It can also happen if the code signature of an app changes for whatever reason (e.g. buggy update, broken disk, some other software that „accidentally“ breaks the signature). At least for BetterSnapTool the code signature hasn’t changed through updates.

There are a lot of those "whatever reasons". And it just so happens that these kinds of "haxie" tools are more likely than most to employ these techniques. So, in addition to what I mentioned above, consider some of these other scenarios:

buggy update - Any kind of auto-update mechanism is likely to trigger this. In theory, it is possible to update an app and its signature. It just doesn't happen bloody often.

broken disk - I have no idea what they are talking about there.

some other software that "accidentally" breaks the signature - All kinds of possibilities here. Ironically enough, some of these are these same system modification apps that are so popular. Monolingual will remove "foreign" (i.e. non-English) language from apps - breaking the signature. Little Snitch can interfere with virtually everything. Any kind of "security" software can cause similar problems.


Apple's Gatekeeper software lives up to its name. It checks an app's signature after an app has been first downloaded. But after that, Apple typically doesn't verify signatures. Apps also typically don't verify their signature either. So if a signature becomes invalid for whatever reason, nobody is going to know. But something like TCC that double-checks signatures is going to be the one to find it. Plus, sometimes these apps may try some tricks to avoid Gatekeeper problems. That's good for avoiding Gatekeeper problems, but not for avoiding TCC problems.


I’d really like to know whether this is something that needs to be addressed by Apple or if app developers are missing something here and need to be helped.

Does it matter? Whether the ultimate cause is Apple or 3rd party developers, there's nothing you can do to affect any change. Apple's software could very well have bugs. So could 3rd party apps. Every app is different. Can you use command line tools to hack around on the database and fix it for a time? Maybe.


I think one thing you can do is be careful with auto-updates for these kinds of apps. I think that would go a long ways towards alleviating this problem. Next time one breaks during an update, make a note of it. Uninstall the app completely, restart, then reinstall. I suspect you might find that certain apps are more likely to exhibit this particular problem than others. If that happens, then you might lean a little bit closer towards it being the fault of 3rd party developers. But still, it won't really mean anything.

Jun 26, 2024 7:20 AM in response to etresoft

This is the answer that I received from the CEO of BetterSnapTool:


This is a macOS issue/bug that has been around for ages.

It‘s not related to the code of the apps. It can happen to any app that requires tcc protected permissions. It will definitely happen to any app with enough users at some point.

Usually resetting the tcc database will solve the issue (for BetterSnapTool that can be done using this terminal command (make sure BetterSnapTool is quit):

tccutil reset All com.hegenberg.BetterSnapTool

It can also happen if the code signature of an app changes for whatever reason (e.g. buggy update, broken disk, some other software that „accidentally“ breaks the signature). At least for BetterSnapTool the code signature hasn’t changed through updates.


According to the developer of Typinator, the issue also lies with macOS.


Jun 18, 2024 2:41 PM in response to numbles45

First give this a try: boot into Safe Mode according to How to use safe mode on your Mac and test to see if the problem persists. Reboot normally and test again.


NOTE 1: Safe Mode boot can take up to 3 - 5 minutes as it's doing the following; 

• Verifies your startup disk and attempts to repair directory issues, if needed

• Loads only required kernel extensions (prevents 3rd party kernel/extensions from loading)

• Prevents Startup Items and Login Items from opening automatically

• Disables user-installed fonts 

• Deletes font caches, kernel cache, and other system cache files


NOTE 2: if you have a wireless keyboard with rechargeable batteries connect it with its charging cable before booting into Safe Mode. This makes it act as a wired keyboard as will insure a successful boot into Safe Mode.


Next, have you tried removing BetterSnapTool from the Accessibility pane with the "-" button and then add it back?


Jun 21, 2024 4:43 AM in response to numbles45

numbles45 wrote:

Hello and thank you for your help. I will definitely give this a try. The only problem I have with Safe mode is that it deactivates certain features, like wifi, so it's not practical to use it for a long period of time. At the same time, this issues I encounter with BetterSnapTool and Typinator don't arise systematically every time I start my iMac. I haven't tried removing BetterSnapTool from the Accessibility pane and then adding it back, but I will give it a try next time the issue arises. Hopefully, launching in Safe mode will clean up things.

Again, thank you for your kind assistance.

Perhaps the issue is, the computer is running a version Typinator that is designed for Sonoma that runs natively on Apple Silicon Computer


Which, this computer is not

They to offer an older version which may or may not resolve this ongoing issue


" Starting with version 8.12.1, Typinator is a Universal Application that runs natively on Apple Silicon processors. Older versions of Typinator basically work on Apple Silicon processors, but they are slower and require Rosetta. If you have a Mac with an Apple Silicon processor, we highly recommend updating to Typinator 9.0. "

Jun 21, 2024 10:13 AM in response to numbles45

numbles45 wrote:

Problem is that I cannot predict when the issue will arise again because I don't know what triggers the issue or even how to find out.

I'm not sure what that has to do with using Safe Mode. As long as there is no problem, boot in Normal mode. Should you need to to troubleshoot, boot in Safe Mode then restart in Normal Mode. That will often resolve the issue. Again, no one is suggesting that you try do do normal work while using Safe Mode.

Jun 21, 2024 4:59 AM in response to numbles45

numbles45 wrote:

According to the app developers, the issue lies with macOS:

That's what they always say.

The above issue has remained unresolved now for many months. Is there anything one can do for Apple to finally address this problem or does anyone know of a way to permanently fix the issue (without removing the apps!) ?

It's a bug in the app. You have many such apps. Sometimes they even go beyond bugs and apps try to hack your TCC database. That's why these problems happen.

Jun 26, 2024 7:46 AM in response to numbles45

The strange thing is that the apps report that the TCC Accessibility permissions are not enabled, yet visiting the settings in System Preferences shows that they are. To my understanding, this means that the apps and System Preferences aren't querying the TCC permissions from the same database. How can that be?


--------------------

I'm posting the following interesting information from ChatGPT:


Yes, it can happen that an app's Accessibility permission may need to be reset. Changes to the TCC database, which stores these permissions, can occur due to various reasons. Here are some common causes:


Causes of Changes to the TCC Database:

  1. System Updates:
    1. Major macOS updates or upgrades can sometimes reset permissions as part of the update process to ensure compatibility and security.
  2. Application Updates:
    1. When an application is updated, especially if the update includes significant changes or a re-signing of the app, macOS might require the permissions to be re-granted.
  3. Restoring from Backup:
    1. Restoring a system from a backup (e.g., Time Machine) can sometimes lead to permission resets, as the system may not recognize the restored state as having the same permissions.
  4. User Actions:
    1. Users can manually reset or revoke permissions from the System Preferences (or System Settings in later macOS versions). If a user decides to revoke Accessibility permissions, the app will need to request them again.
  5. Corruption or Issues with the TCC Database:
    1. If the TCC database becomes corrupted or experiences issues, it may lead to a loss of stored permissions, necessitating a reset.
  6. Security Measures:
    1. macOS might reset permissions as a security measure if it detects potentially malicious activity or unauthorized changes to the system.


Jun 26, 2024 8:11 AM in response to IdrisSeabright

The interesting question that you seem to have skipped was: "the apps and System Preferences aren't querying the TCC permissions from the same database. How can that be?"


The ChatGPT info just tells me that, in the absence of any update or manual intervention, the TCC database can get corrupted. Unfortunately, it doesn't say how or answer the above question.

Jun 26, 2024 10:17 AM in response to numbles45

numbles45 wrote:

I’d really like to know whether this is something that needs to be addressed by Apple or if app developers are missing something here and need to be helped.

In either of those cases, there's really nothing you can do other than provide information about what you are observing to Apple and the developer. Unless you are a developer yourself, it's unlikely that you are going to be able to ferret out the root cause of the problem.

Jun 21, 2024 3:59 AM in response to Old Toad

Hello and thank you for your help. I will definitely give this a try. The only problem I have with Safe mode is that it deactivates certain features, like wifi, so it's not practical to use it for a long period of time. At the same time, this issues I encounter with BetterSnapTool and Typinator don't arise systematically every time I start my iMac. I haven't tried removing BetterSnapTool from the Accessibility pane and then adding it back, but I will give it a try next time the issue arises. Hopefully, launching in Safe mode will clean up things.


Again, thank you for your kind assistance.

Jun 21, 2024 7:02 AM in response to numbles45

User wrote " The only problem I have with Safe mode is that it deactivates certain features, like wifi "


 Safe Mode. This will perform a Disk Repair, clear cache files and only load Apple Software, extensions and fonts. The boot up will be slow and can take some time - Normal.


Safe Mode will also eliminate Third Party Software, extensions and drivers from loading.


It will only load the Minimum amount of Core Apple Processes to allow the the computer to function at a reduced Level of Performance 


From my experience, Safe Mode would not disable Wifi


That is, unless, the computer were running some Third Party Software that is Required to use a Third Party wifi Adapter

Jun 21, 2024 9:25 AM in response to Owl-53


A macOS universal application is a type of application that is designed to run natively on both Intel-based and Apple Silicon (ARM-based) Macs. This capability ensures that the application can take full advantage of the hardware and performance features of both types of processors.


Key Features of macOS Universal Applications:


  1. Binary Support for Both Architectures:
    1. A universal app contains binaries for both Intel and Apple Silicon architectures. This means that the app can execute native code on either platform, optimizing performance and efficiency.
  2. Seamless User Experience:
    1. Users do not need to worry about compatibility issues or performance drops because the app will run natively on whichever architecture their Mac uses.
  3. Single Application Package:
    1. Developers distribute one application package that includes binaries for both architectures, simplifying the installation process for users.
  4. Backward Compatibility:

Universal applications ensure that older Intel-based Macs are still supported, even as Apple transitions its product line to its own ARM-based chips.


Jun 21, 2024 9:45 AM in response to numbles45

numbles45 wrote:

How can you be so sure? How should the developers debug this issue?

It's a well-known, long-term problem. There are lots of people who write and use these kinds of system hacks. Back in the day, people tried to call them "haxies" to make it sound more benign. All of this kind of code needs a user-granted entitlement to run on a modern operating system. But the code was developed 20 years ago and may or may not have been updated or reviewed for modern coding standards. It's a developer's job to debug these problems, not yours.

Jun 26, 2024 8:01 AM in response to numbles45

numbles45 wrote:

I'm posting the following interesting information from ChatGPT:

It's really pretty generic information. ChatGPT tends to spit out a lot of generic (sometimes inaccurate) information in response to a question. Unless the question is very carefully phrased with well defined parameters, the answer is usually too general to be of any substantive use.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Why are accessibility settings being ignored

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.