The Mac Observer

Skip navigational links

You're viewing an article in TMO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site:
Office 2008 Installer Creates Mac OS X Permissions Problems

Office 2008 Installer Creates Mac OS X Permissions Problems

by , 9:05 AM EST, January 25th, 2008

Microsoft's freshly released Office 2008 for the Mac is good news for users looking for better cross-platform compatibility, but bad news for anyone that strictly controls user access in Mac OS X. Mac consultant Joel Bruner discovered that the Office applications and files are installed with the owner set to user 502 which could potentially create control or security-related issues in multi-user environments.

Mr. Bruner said on his blog "So let's say, Mr. IT installs this on a user's machine where the first user is the admin (501) and the standard user is Joe's User (502), well, when after all's installed, it will give Joe User (502) ownership of [the Microsoft] folders and their installed contents."

While assigning ownership of Office 2008's components to what may be a standard user means that control over those pieces may be in the wrong hands, there is another potential problem with the file and folder settings, too: All of the components are set as executable instead of read only, or read and write, even if they don't need to be executable.

"Now tell me does... /Microsoft Office 2008/Read Me.html need to be executable for you to look at it? Tick, tick, tick, *ding*! No," he said.

On a Mac with only one user this may not be a major issue, but in a workgroup setting it could cause unexpected headaches for network and IT managers expecting application control to be handled by a different user.

Erik Schwiebert, Microft's MacBU Developer Lead, responded on Mr. Bruner's blog with "The MacBU is aware of this issue," but did not offer a time frame for a fix.

Observer Comments

Show: Subjects Only | Full Comments
Close Name:Guest
Subject: No Problem

Actually it wont cause a problem for IT in larger workgroups. Office will be installed using Remote Desktop or another package delivery tool. Then the permissions used by said organization will be set using the same tools by the IT staff. It doesn't matter what Microsoft's installer sets them too. The IT department will likely change them anyway.

MS Office has been one of the easiest products to manage, I suspect Office 2008 may be even easier with their adoption of Apple's package format for massive deployment. Now Adobe, thats another story.

Posted by an IT Guy managing a large group of Mac users.

Close Name:Bosco Posts: 1002 Joined: 03 Jun 2002
Subject: Why IT people usually live in closets.

Tick, tick, tick, *pedantic dork*! Save the drama for your mama.

Comment on this Article


You cannot edit your comments.   You cannot delete your comments.

Comments are currently closed. Please email the author instead.


Recent Headlines - Updated July 5th

Fri, 10:29 AM
News - Apple Warns of Learning Interchange Security Breach
7:30 AM
News - Happy Fourth of July!
Thu, 6:07 PM
TMO Scoop - Psystar Moves to Drop Bankruptcy Ahead of Apple Legal Battle
5:37 PM
News - Uncomfirmed Reports Say Apple & Nvidia On The Outs
4:57 PM
News - Microsoft Sick Over Barf Ad
4:09 PM
Product News - KRK Ships R6 Passive Studio Monitor for Recording
3:45 PM
John Martellaro's Blog - Particle Debris (week ending 7/2)  Juiced, Joost and Goosed
3:12 PM
Product News - ExactScan 2 Pro Released
1:56 PM
Deal Brothers - Apple TV with 160GB Hard Drive:  $324.00 Delivered
12:46 PM
TMO Appearances - TMO Appearances Jeff Gamet Shares iPhone Apps on MacJury
10:41 AM
Product News - Art Text 2.2 Adds New Templates, Layer Options [Updated]
10:04 AM
Hot Forum Topic - Deciphering Mac Sales

The Mac Observer Reader Specials

  • __________
  • Buy Stuff, Support TMO!
  • Podcast: Mac Geek Gab
  • Podcast: Apple Weekly Report
  • TMO on Twitter!