Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Restrict Simple Finder users to only certain applications' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Restrict Simple Finder users to only certain applications
Authored by: jbelkin on Aug 26, '04 03:21:04PM

There is a much simpler way.

Let's say you have it set up this way:
MAIN/ADMIN
RESTRICTED USER #1
RESTRICTED USER #2

To prevent user #1 & #2 from accessing apps, just move it from 'Applications' to another folder. I created a folder on the desktop calls Applications. Other than the fact Apple's idiotic updater can't find any apps not in the applications folder, it will work fine.

The other hole not mentioned is that in something like WORD, you can type www.microsoft.com, click on it and launch SAFARI/EXPLORER.

Don't forget Netscape & Outlook are in the Os9 folder.

BTW, I spent about 20 hours getting a setup working and frankly, the LIMITED/RESTRICTED Finder setup is almost pointless.

Because if you have log in set-up, you have virtually the same security and in many ways, it's actually MORE complicated for the user because SHARED is SHARED but PUBLIC is not really ... so the limited FINDER thing works if your communications is pretty much one way. If you want to leave notes for user #1 & User #2 and they will ocassionally communicate back with you - then it might work but the limited finder unlike the old mini-finder is not really set up for newbie users - a) because you can't move things around - if you click on it, the file/app opens. No double-clicks required. I've yet to figure out how users can actaully trash something and if you want everyone to see a note, you put it in SHARED - makes sense and they can save to SHARED. Now, if they wish to send a file to you, they have to naviagte in the LIST VIEW finder to PUBLIC and save it in there - one way only - once they drop it in, no one else can see it including themselves. And so on and so forth.

Basically the problem is that instead of making it easier, they made it more restrictive but not easier. Limited Finder makes sense if you have like 10 files for clients or customers to read on screen and they can't wander away elsewhere but if you have regular actual users, there are just too many weird quirks.



[ Reply to This | # ]
Restrict Simple Finder users to only certain applications
Authored by: kikjou on Aug 26, '04 04:44:48PM

I think Apple's intention with the Simple Finder was to provide an interface that makes it hard for people to accidentally mess up their account or the computer. If you want a really secure and tightly controlled user space, you will probably have to wait for Tiger (10.4) because the current Unix permissions only allow for two instances of "users" other than yourself to access a file (group and world), which is clearly not enough.
I have used the Simple Finder in a Music account where iTunes and Safari launch automatically. This account makes it easy for my guests - who often don't know Macs or are computer illiterate - to listen to music and to read their web mail.



[ Reply to This | # ]
Restrict Simple Finder users to only certain applications
Authored by: stcanard on Aug 26, '04 07:29:20PM

Actually, the group permissions gives you a suprising amount of flexibility in creating different classes of users. You should be able to get just about any level of granularity you want, you just have to spend a lot of time creating groups and setting the group ownership / files appropriately.



[ Reply to This | # ]