Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Confirmation of a multi-user application limits bug' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Confirmation of a multi-user application limits bug
Authored by: wpdv on Feb 04, '04 12:25:08PM

With Multi-User enabled, and my childrens account "limited", including not allowing the use of Safari, I thought I was all set. However, everytime my daughter was on the computer, she was able to access the Internet. I tested the limitation settings, everything was operating as it should. Later, when my daughter was on the internet again, I asked her how she was able to get on. She said, "It was easy Dad, under the blue Apple I went to "Recent Items", and selected Safari. If that didn't work, I would go to "Mac OSX Software" and get on. I tried not to look surprised ... Leave it to a thirteen year old to find a way around Apples "security".



[ Reply to This | # ]
Confirmation of a multi-user application limits bug
Authored by: jesboat on Feb 04, '04 04:29:27PM

Hey, windoze security isn't much better. (I'm just pointing this out.)

At school, some computers are just Citrix clients. Desktop icons are disabled, right-clicking is disabled, the only things in Start are shut down and programs, the only in programs is start up, and the only thing in start up is the citrix client. Nothing is loaded into the systray, quicklaunch is not shown, and Ctrl-Alt-Del only gives you the option to Log Out, Shut Down, or Cancel.

Simply double-clicking on Startup in the Start Menu opens an explorer window.

---
--
With no walls or fences on the 'net, who needs Windows or Gates?



[ Reply to This | # ]
Confirmation of a multi-user application limits bug
Authored by: Renghe on Feb 04, '04 05:20:09PM

But that's not all about "security". With Safari she has access to every other application. Just type "file://Applications" and you'll get a new Finder window of your applications folder. Using "file://" is also possible.



[ Reply to This | # ]
Confirmation of a multi-user application limits bug
Authored by: gshenaut on Feb 04, '04 07:34:40PM

If you want to deny access to some application except for a certain group
of users, create a new group (e.g., "grownups"), and go through the
/Applications directory changing the group of the executables to the new
group, and changing the mode of the executable to 750 (owner has
read/write/execute, group has read/execute, other no permissions).
If people not in the group do not have the ability to become superuser,
then they will not be able to start the application.

A simpler method would be to change the group to "admin" if it isn't
already, and then change the mode to 750; this will restrict access to the
application to those with administrative access to the machine.

Greg Shenaut



[ Reply to This | # ]
Confirmation of a multi-user application limits bug
Authored by: climberbry on Feb 05, '04 10:17:15AM

There are many easy ways around this solution.



[ Reply to This | # ]