_mc

Q: Multiple Permission Entries

We have some Problems with File-Permissions on our 10.8.5 Server. Lately, some user expierience Problems when trying to open files (No Permission to edit File).

When tried to look at the Permissions of a certain File, it shows multiple entries of the Usergroups (See Screenshots). Is this Normal?

 

Thank you for Help.

 

screenshot Kopie.jpg

mac pro, Mac OS X (10.5)

Posted on Nov 20, 2013 6:46 AM

Close

Q: Multiple Permission Entries

  • All replies
  • Helpful answers

  • by Scott Klettke,

    Scott Klettke Scott Klettke Nov 21, 2013 2:04 PM in response to _mc
    Level 1 (30 points)
    Nov 21, 2013 2:04 PM in response to _mc

    @_mc,

     

    I had similar problems after upgrading to the latest version of iBank (within Mavericks 10.9, in my case).

     

    With my issue, I'd try to import my data file from the previous version and would get these error messages below:

     

    Screen Shot 2013-10-31 at 4.05.06 PM.pngScreen Shot 2013-10-31 at 4.16.11 PM.png

     

    Furthermore, every time I would attempt to save it, numerous folder would be created having the name of the file. Under the Sharing & Permissions tab I had 21 duplicate entries with my personal username with custom privilege and multiple everyone entries with varying privileges.

     

    While we were trouble shooting the issue I was asked to run the command,

     

    ls -lhe folder/file

     

    The output for me looked something like this:

     

    ls -lhe /Volumes/HD/Documents/Documents/file

    total 13864

    drwxr-xr-x+ 13 username  admin   442B Aug 15  2010 CategoryImages

    0: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    1: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    2: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    3: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    4: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    5: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    6: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    7: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    8: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    9: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    10: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    11: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    12: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    13: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    14: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    15: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    16: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    17: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    18: user:username allow add_file,add_subdirectory,writeattr,writeextattr,writesecurity

    19: group:everyone deny delete

    20: user:username allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextat tr,writeextattr,readsecurity

     

    By running:

     

    chmod -v -R -N /Volumes/HD/Documents/Documents/file

     

    I was able to remove all the duplicate entries as well as remove the ACLs (extended permission attributes). Please visit Apple's chmod page for further information. The tech support at iBank (which was outstanding!) did recommend I make a backup copy of my file before running this command in case it caused more problems than it solved.

     

    Hopefully this helps you somewhat. With our similar problems of multiple permission entries, clearing the extended permission attributes might work for you too.

  • by infinite vortex,

    infinite vortex infinite vortex Nov 24, 2013 6:09 AM in response to Scott Klettke
    Level 7 (21,405 points)
    Nov 24, 2013 6:09 AM in response to Scott Klettke

    One should ALWAYS be extremely careful when using…

     

    chmod -R -N [path]

     

    … as servers, and clients too, are reliant of ACLs for their correct operation. Blanket removing of ACLs should never be done like this unless you are 100% sure of the effects of doing such a thing are going to be.

  • by Scott Klettke,

    Scott Klettke Scott Klettke Nov 25, 2013 8:18 PM in response to infinite vortex
    Level 1 (30 points)
    Nov 25, 2013 8:18 PM in response to infinite vortex

    Definitely agree. I do not use OS X as a server and would hope that the people that are reading this on the Server discussion form would understand the implications.