How is the Documents folder locked to administrators?

How are user folders locked? If I log in as an admin, I find that the Documents folder for other users is locked. I can change the permissions using sudo, but it still does not give me access to the folder. I can view its contents with sudo, but not from the Finder. Get Info shows that everyone can read the folder, but in fact I, as admin, cannot. The access control list only prevents deleting, not reading. How is the "you have no access" indicated in the file system? (I am not trying to spy on my employees--this is a personal computer and I created several accounts for different roles.)


mikeliskissimac-2:bickis mikelisbickis$ ls -led Documents


drwx------+ 82 bickis  staff  2624 10 Jun  2024 Documents


 0: group:everyone deny delete


mikeliskissimac-2:bickis mikelisbickis$ chmod o+rx Documents


chmod: Unable to change file mode on Documents: Operation not permitted


mikeliskissimac-2:bickis mikelisbickis$ sudo chmod o+rx Documents


Password:


mikeliskissimac-2:bickis mikelisbickis$ ls -led Documents


drwx---r-x+ 82 bickis  staff  2624 10 Jun  2024 Documents


 0: group:everyone deny delete


mikeliskissimac-2:bickis mikelisbickis$ ls Documents


ls: Documents: Permission denied


These seems to be an inconsistency between the "everyone can read only" and "You have no access". What is going on?


I can get around this by always using sudo, but I am just wondering what is going on? Why does the directory supposedly allow everyone to read and execute, yet I cannot view it without using sudo?


I am running Monterey on 12.7.6 on a 2019 Intel iMac.




iMac 21.5″, macOS 12.7

Posted on Dec 29, 2025 9:09 AM

Reply
6 replies

Dec 29, 2025 9:51 AM in response to Mikelis Bickis

People's home folders are their own. Other users on the system should not be able view or modify someone else's data. This is as intended. You should not be modifying the permissions to those other user accounts.


If you need to share data between users on the system, then you can place the data in the "/Users/Shared" folder which is why that folder exists. See the following Apple article for details and a read-only option for sharing using the "Public" folder within your home user folder.

Share files with others who use your Mac - Apple Support


FYI, the Finder has its own rules. And "sudo" and root are not absolute God options in macOS anymore due to the recent privacy & security changes in macOS over the past five years. There are permissions beyond root these days that cannot be circumvented. Trying to circumvent macOS behavior to get around the new rules will just result in a broken system since macOS does not like deviating too far from defaults.


Dec 29, 2025 10:27 AM in response to HWTech

Thanks for the lecture, but you did not answer my question. It is possible to share folders across users without using either the Public or Shared folders. I have many such. I should be able to set up my computer the way I want. I wanted to know how MacOS puts a lock on the Documents folder, since it does not seem to be using unix permissions. And why "Get Info" says everyone can read, when in fact they can't.

Dec 29, 2025 11:08 AM in response to Mikelis Bickis

Mikelis Bickis wrote:

Thanks for the lecture, but you did not answer my question. It is possible to share folders across users without using either the Public or Shared folders. I have many such.

And what is wrong with those options? We cannot help without knowing why the easy & official methods are insufficient for you.


I should be able to set up my computer the way I want.

Then macOS is not what you want to use. Apple decides how macOS can be configured & used. And Apple is getting more aggressive in limiting options. macOS has been moving towards an iOS format for years now. Think about what you can & cannot do on your iPhone & iPad.


I wanted to know how MacOS puts a lock on the Documents folder, since it does not seem to be using unix permissions. And why "Get Info" says everyone can read, when in fact they can't.

I did explain in my previous post. Apple is hacking on every new privacy & security related feature in order to attempt to hide these things from view. Some of these restrictions are baked into the core OS now with no way around them. If iCloud is enabled on any of those user folders, then that will affect the permissions and even the location of the data.

Dec 29, 2025 1:29 PM in response to HWTech

HWTech wrote:

People's home folders are their own. Other users on the system should not be able view or modify someone else's data. This is as intended.

This seems to be only partly true.


In my Sequoia system 15.7.3 the only folders in the /Home folders of other Mac users that are protected from viewing by my main admin account are the following: Desktop, Documents, Downloads, Movies, Music and Pictures. A user created folder inside any one of those is also inaccessible.


However, a user created folder saved within /Home folder itself, on the same level as those noted, is not secured by default on my Mac. I can freely open and manipulate any files saved within.


I'm sure I can manipulate the permissions of those folders using Terminal commands to disallow access from other accounts, but I wouldn't know what the command(s) might be.


This behavior is the same for me as far back as 10.15 Catalina. In fact, you can see a hint of that in the author's original post.

Dec 29, 2025 5:26 PM in response to D.I. Johnson

D.I. Johnson wrote:


HWTech wrote:

People's home folders are their own. Other users on the system should not be able view or modify someone else's data. This is as intended.
This seems to be only partly true.

In my Sequoia system 15.7.3 the only folders in the /Home folders of other Mac users that are protected from viewing by my main admin account are the following: Desktop, Documents, Downloads, Movies, Music and Pictures. A user created folder inside any one of those is also inaccessible.

Yes, that is correct. I'm actually surprised Apple has allowed that behavior, but it is probably due to the "Public" folder feature & this being the easiest way to implement it. Since Apple does not automatically show the root of the home user folder in Open/Save dialogs or in the Finder, the average user probably doesn't store things there anyway (may be Apple's thought process).


I knew I should have rewritten my post so that would not be brought up or I should have addressed it directly, but I was being a bit lazy today. Hoping no one would notice (should have known better) ;-)


Dec 29, 2025 9:15 PM in response to Mikelis Bickis

Very likely, the enclosing home folder ("Macintosh HD > Users > (your login name)") is set up so that "everyone" has "No access".


Interestingly enough, although my "Public" folder is inside a home folder that has "No access" (for everyone), the "Public" folder has "Read only" access. The Public folder also has the "Shared folder" box ticked off, and I would guess that box might be controlling other permission mechanisms beyond the "rwx" bits – ones that can override the "No access" setting on the enclosing home folder.


Looking inside the "Public" folder, there is a "Drop Box" folder which does NOT have the "Shared folder" box ticked off, but which allows "Write only (Drop Box)" access for "staff" and for "everyone".

How is the Documents folder locked to administrators?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.