How to Repair User-Level Permissions in Mac OS X

| How-To

As discussed in Mac Geek Gab 355, Access Control Lists (ACLs) are permissions that impact user-level access rights within OS X.  They are different from Permissions, which impact system-level rights.  In simplified terms, items inside the user’s home folder are regulated by ACLs while items outside the user’s home folder are regulated by Permissions. 

Due to this distinction, using Disk Utility to Repair Permissions will not resolve issues related to objects in the user’s home folder.  To resolve these issues, we need to “reset ACLs.”

In OS X 10.6 Snow Leopard, boot to the Mac’s install disc by inserting the disc and holding down the “C” key at startup (or holding Alt/Option and selecting the disc from the boot menu).  Once you’ve selected your language and are at the installer’s main menu, choose “Utilities” from the menu bar, then “Reset Password.”  This menu allows you to reset user account passwords but also allows you to reset ACLs by choosing a user account from the top menu and then clicking “Reset” at the bottom of the screen.

Reset Password also lets you reset user-level permissions
The Reset Password Menu in Snow Leopard and Lion’s Installers lets you reset your Access Control Lists 

In OS X 10.7 Lion, Apple removed the Reset Password option from the Utilities menu in the Recovery Partition.  Dwight Silverman over at the Houston Chronicle found a workaround: boot to Lion’s recovery partition by holding “Command-R” at startup (or holding Alt/Option and selecting the recovery partition from the boot menu).  Then, from the Utilities menu, choose Terminal. Type “resetpassword” into Terminal and hit Return.  This launches the Reset Password menu.  From here, proceed as you would have under Snow Leopard.

Once the process is complete, exit the utility and reboot.  This should resolve any permissions issues involving user-level objects.  Thanks, Dwight, for the great tip!

Sign Up for the Newsletter

Join the TMO Express Daily Newsletter to get the latest Mac headlines in your e-mail every weekday.

Comments

geoduck

In OS X 10.7 Lion, Apple removed the Reset Password option from the Utilities menu in the Recovery Partition.  Dwight Silverman over at the Houston Chronicle found a workaround: boot to Lion?s recovery partition by holding ?Command-R? at startup (or holding Alt/Option and selecting the recovery partition from the boot menu).  Then, from the Utilities menu, choose Terminal. Type ?resetpassword? into Terminal and hit Return.  This launches the Reset Password menu.  From here, proceed as you would have under Snow Leopard.

Come on Apple. If somebody is smart enough to know that a) they need to reset their password, and b) they need to boot to the Recovery PArtition to do it, then why did you hide the tools? Fine if you want to keep the stuff from the average user, but why make it harder for those of us that DO know what we’re doing.
This is just annoying.

Dave Hamilton

@geoduck - I couldn’t agree more. It’s baffling to me why this was hidden from us in the first place!

furbies

why this was hidden from us in the first place!

Guys. It was hidden otherwise the little Genii in the Apple Stores wouldn’t have a trick to try and amaze us with ?

Dave

Has MacObserver ever thought of doing a (linked and referenced) series of reports/articles/how_to(s) that reference all these little tips/tricks.
And include reviews of the best utility apps ?

furbies

How come we can’t repair the ACL while booted from the internal HDD ?

Are ACLs so very different from Permissions ?

MacWorks

Apple has definitely made moves to keep their OS and products secure so that they can be certified as usable products for organizations such as the US Government. I wouldn’t be surprised if they removed the feature to maintain such compliance.

ferdnerfer

Is it possible to log the user permission changes made by “resetpassword”? It would be useful to see what was changed.

Log-in to comment