Administrator (me) Denied Permission Access

Question

Level 1

19 points

Administrator (me) Denied Permission Access

Using High Sierra 10.13.2 Mac Pro 5.1 I've used Terminal to repair permissions with zero success. I am the Administrator and password is accepted. When I try to add or delete a name to change permissions the screen shot below is what I get. Apparently "Read Only" is all I'm allowed...

This could have been a problem since I booted using a much earlier system with an external hard drive a few years ago. Could I have the "read only" symptom transferred to my internal drive?? I do not use any external drives at this time. There is no "ignore ownership on this volume" box in the get info window..

I do have two other cloned SSD internal drives with all my data using CCC just in case I have to make some extreme attempts to fix this. Thanks in advance..

Mac Pro, macOS High Sierra (10.13.2), SSD APFS Mac Pro 5.1 32 GB

Posted on Dec 27, 2017 9:03 AM

Reply

Answer 1

BobHarris

Level 9

56,927 points

Dec 27, 2017 11:10 AM in response to paultahoe

SIP (System Integrity Protection) is most likely preventing you from messing with the permissions on the System files.

<https://en.wikipedia.org/wiki/System_Integrity_Protection>

SIP prevents even 'root' (which is what admin elevated privileges result in) from make modifications to a subset of system files and directories that macOS considers critical to the correct operation of the system, and have historically been a support problem because when you have millions of users there enough of them make changes "Just Because They Can", and turn their Macs into "Door Stops".

Reply

Answer 2

paultahoe Author

Level 1

19 points

Dec 27, 2017 10:45 AM in response to paultahoe

I just noticed "SophosEndpoint" in the users privilege list.. I do not use Sophos anymore and have un-installed Sophos but it seems to have left Endpoint in the users list...

Reply

Answer 3

BobHarris

Level 9

56,927 points

Dec 27, 2017 1:57 PM in response to paultahoe

They did. They gave you the ability to disable SIP

<https://www.imore.com/el-capitan-system-integrity-protection-helps-keep-malware- away>

Reply

Answer 4

paultahoe Author

Level 1

19 points

Dec 27, 2017 11:38 AM in response to BobHarris

Thanks Bob,

Yes, I agree, if you give folks an avenue to mod system files they will use it..

From what your link is telling me Apple is just trying to save us from ourselves.. AGAIN! Just like High Sierra giving me a 20 or 30 second siesta if I type or click too fast.. 😕

IMO, Apple should realize there's a small number of us that maintain hack insurance.. We clone and backup our total systems and applications at least 2 times a day on separate drives and with the advent of SSD it's almost seamless. I started with a Mac IIX and scanner I still have and complete backups long ago.

I know the difference between Windows and Mac as I use Win 10 almost daily on my CNC plasma table. I still prefer Apple but it's getting more burdensome every day...

Reply

Answer 5

paultahoe Author

Level 1

19 points

Dec 27, 2017 2:04 PM in response to BobHarris

That did the trick.. Thank You! I just had to make a minor access change for a family member. I'll probably re-enable SIP later today. I run two businesses on this machine and another utility patent pursuit so I spend a bunch of time in the office.. Thanks again!

Reply