How to Safely Use Snow Leopard’s File Permissions and Sharing
Mac OS X Snow Leopard lets you set permissions and sharing levels that determine who can access files you own. For your protection, follow these common-sense guidelines when saving documents, assigning permissions, and choosing access levels:
Use your Shared folder: The Shared folder is the center of proper document sharing. Although you may have the urge to create a new document in your Home folder, you’re just making more work for yourself because you’ll end up copying that document from your Home folder to the Shared folder. Instead of an extra step, store a document that’s intended to be shared in the Shared folder.
Don’t assign permissions just to protect a file from deletion: Remember, if all you need to do is prevent anyone (including yourself) from deleting an item, you don’t need to go to all the trouble of changing permissions. Instead, just display the Info dialog for the item and select the Locked check box to enable it, which prevents the item from being deleted from the Trash until the Lock status is disabled.
Review the contents of a folder before changing permissions for enclosed items: That confirmation dialog doesn’t appear just for kicks. For example, if you set a highly sensitive, private document with permissions of No Access for everyone but yourself and then you apply less-restrictive permissions globally to the folder that contains the document, you’ve just removed the No Access permissions, and anyone can open your dirty laundry. Therefore, make sure that you open the folder and double-check its contents first before applying global permissions to the items it contains.
Don’t change permissions in the Applications or Utilities folders: If you have Administrator-level access, you can actually change the permissions for important applications such as Mail, Address Book, iTunes, and Safari, as well as their support files. This spells havoc for all users assigned to the standard-access level. Be polite and leave the permissions for these files alone.
Don’t change System ownership: Mac OS X is stable and reliable. Part of that stability comes from the protected state of the System folder, as well as a number of other folders on your hard drive. If you displayed the Info dialog for the System folder, you’ll see that the Owner is set to system, and the Group is set to wheel (a term from the UNIX world that encompasses all administrator accounts). Now, promptly close that Info dialog, without making any changes!
Never, never, never change any permissions for any files owned by the System unless specifically told to do so by an Apple support technician. Do not monkey with System-owned items.