How to clean up permissions Mac Server issue

I am having some very frustrating issues with permissions in shared group folders on mac server. When i create a new set of permissions at the top of the folder tree and then propagate them it seems to just create another copy of permissions into all of the folders beneath the root rather than deleting the previous permissions and writing the ones I want to set up. In other words i am ending up with several sets of permissions per user for each folder and file.


So the question i am trying to ask is how do i clean up all of these permissions from all of the folders and files and start afresh?


The main issues that i am having is that I even with full administrative rights am getting denied permission to open files and save to the server.


My server is running OS X El Capitan 10.11.4 , mac server version 5.1

Mac mini, OS X El Capitan (10.11.4)

Posted on Jun 6, 2016 10:08 PM

Reply
3 replies

Jun 7, 2016 11:55 PM in response to Tessellate a_d__

The easiest (and usually the quickest) way to clean up you permissions is to use the chmod command from Terminal. If your ACLs are multiplying uncontrollably (please not that certain versions of Office for Windows used to cause this) you might want to quickly remove all ACLs and then start over. To do this, follow these steps:


1: Stop all file services to ensure that no one is altering data while you are working on it.

2: Remove all ACLs using this command (replace with actual path to data):

sudo chmod -R -N /path/to/your/share


This will remove all ACLs from all files and folders in /path/to/your/share and recurse to everything in the folder.


Now, if you think your POSIX permissions are out of whack, you can also reset this with two handle commands. To reset all directories to standard umask, use:

sudo find /path/to/your/share -type d -exec chmod 755 {} \;


To reset all files to standard umask, use:

sudo find /path/to/your/share -type f -exec chmod 644 {} \;


Note: Your permissions model may be more restrictive and some workflows rely on limiting via POSIX. If so, these commands make not be what you want.


And there you have it. The above three commands can remove all ACLs and set all folders to 755 (drwxr-xr-x) and all files to 644 (-rw-r--r--).


Once you reset the data, go back to Server.app > Sharing or Server.app > Server > Storage and assign your permissions.


Reid

Apple Consultants Network

Author - "El Capitan Server – Foundation Services"

Author - "El Capitan Server – Control & Collaboration"

Author - "El Capitan Server – Advanced Services"

:: Exclusively available in Apple's iBooks Store

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to clean up permissions Mac Server issue

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.