permission problem for Safari and Canon Scanner to the download and picture folders.

rarthurr wrote:

For Barney:

Thank you for your very helpful reply!!

It appears that these recent problems started after a recent macOS update, but that is just a guess, as

both Safari downloads and Scan to Pictures have worked for years.

I have not been playing with the permissions (until now).

Each of the folders have Admin, Me, everyone with Read/Write privileges.

I assume that group 0,1,2 refer to Admin, Me, everyone?

No. They are just the enumeration and thus, execution order.

Safari still does not download to the Download folder.

Image Capture (Scanner) still does not allow scan to the Pictures folder. 

((The default interactive shell is now zsh. Mac:~ ronald$ chsh -s /bin/zsh Changing shell for ronald.))

iMac:~ ronald$ ls -le ~/

drwx------@ 19 ronald staff  608 Aug 13 15:33 Desktop

drwx------@ 27 ronald staff  864 Jul 29 12:36 Downloads and Pictures

 0: group:everyone deny add_file,delete,add_subdirectory,delete_child,writeattr,writeextattr,chown

 1: group:everyone deny delete

 2: group:admin allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity

You have somehow added extra ACL entries that are causing you problems.

Did you try to use File Sharing to share those folders? That looks like what it would apply.

On another iMac in our household (same Mac, same macOs) , the permissions for Download and Pictures are Read & Write for Me and No Access for everyone. Both Image Capture and Safari function perfectly. 

That is likely because they do not have the added ACL.

Maybe you have a suggestion what I could try.

I thought about installing macOs again.

Reinstalling macOS won’t change anything. You have altered your home folded. Reinstalling won’t touch your data.

If you used File Sharing to share out those folders, remove all of those changes in File Sharing.

The workable solution (using the Desktop) is really ugly. Who wants to load the Desktop with downloaded apps,

the Download folder is the correct location.

There must be a way to change the "custom access" for the referenced folders.

"Custom Access" means there is an access control list (ACL) on that item. That is normal for the Downloads folder and should not affect your ability to write to that folder. The access control entry that is on the Downloads folder (and Pictures) is "group:everyone deny delete" so that you cannot accidentally delete the folder. Almost every folder in your home has that ACL entry including Desktop.

You can check for possibly another entry that is causing problems in Terminal:

ls -le ~/

rarthurr wrote:

From Safari/Scanner I cannot download to the DOWNLOAD nor to the PICTURE folders,

but I can to the DESKTOP.

So I can Scan and Download to the Desktop but not to the other two folders.

I don't understand the "Safari/Scanner" part...(?) Maybe you can say more.

I would do what works if you hit a road block, seems you have a workable solution.

Both 0 and 2 should be removed.

I’ve added and removed ACLs with chmod, but I do t know without looking it up, either. Every time I do it is trial and error. Here’s where I’d start.

chmod -a# 2 ~/Desktop
chmod -a# 0 ~/Desktop

If you do it in the reverse order, the numbers will change as the enumeration will decrement as you delete entries.

chmod -a# 0 ~/Desktop
chmod -a# 1 ~/Desktop