Thread by @ijterronez

Managing Permissions in #macOS #Mojave
-
Yes, you can. But it used to be easier.
Server app (itunes.apple.com/us/app/macos-s…) had this tab in Server -> Storage where you could modify and apply access control lists (ACL's) on a granular level. No more.
The fix?
1/

If you want a GUI, Marcel Bresink has an has an ACL manager as part of his TinkerTool System app:
bresink.com/osx/TinkerTool… ($14 - Single Unit)
#Workflow #MacAdmin
2/

Here's my beef. Yes, we read "Prepare for changes to macOS Server 5.7.1":
support.apple.com/en-us/HT208312
Yes, I saw the File Sharing server was now bundled in macOS. But, what's available for in System Preferences -> Sharing -> File Sharing isn't enough.
3/

If you define a group and add them to a share as an access control entry (ACE), there are two attributes that aren't propagated through System Preferences:
1. file_inherit
2. directory_inherit
4/

Without these, if a member of the group creates a file or folder, that user can edit or delete the item, but not anyone from the group.
5/

You can verify POSIX and ACL's on your folder In Terminal:
ls -alte <Drag-Folder-From-Finder-to-Terminal window>
6/

"Hey, be a real sysadmin and learn 'chmod'," you say.
OK. Here's a human-readable article on chmod:
techion.com.au/blog/2018/6/9/…
There's a million of these, but I like this one.
Shout-out to Michael Page (@TechionAU)
7/

If you want simple POSIX and ACL permissions management restored to Server app, in Server go to Server -> Leave Feedback... and let @AppleSupport know. They're listening.
8/

I spoke with a Lance at @Apple Enterprise support. He's using the next version of Server app. He confirmed permissions management isn't available... yet.
So I filed a report at bugreport.apple.com.
9/

Of note - @lagentesoft's excellent BatChmod app:
lagentesoft.com/batchmod/index…
Perfect for quickly resetting permissions when you mess them up. And you will.
10/

Another shout-out to David Haines (David_CSG) at @Spiceworks. Gives clarity to POSIX and ACL permissions:
community.spiceworks.com/topic/1787030-…
11/

Finally, here's an Advanced Server Administration guide for an old (really old) version of OS X Server with chapters on POSIX and ACL permissions:
help.apple.com/advancedserver…
:fin:

@threadreaderapp unroll please