06-10-2005, 01:57 AM

(I'm a relatively new mac user ~45 days old) I've been looking for ways to run applications without directly accessing my administrator's account privileges.

I have my ~45 day old powerbook setup with 1 admin account for servicing the system and a limited account for myself for general usage. I am aware of the 'sudo' command, but would like to explore the other possibilities. In windows XP I can use either 'Runas' or a cool little utility 'sunas.' I wish all app developers would really take into account of systems with many users with limited privileges.

...so what are you playing with lately? :yinyang:

06-10-2005, 01:44 PM

I am the admin but I still have to do somethings with sudo in X11 to edit some files

06-10-2005, 02:14 PM

I am admin as well. I have a couple of others like postgres, etc..., but I use the admin.

06-10-2005, 02:18 PM

Originally Posted by Redbrick

....I wish all app developers would really take into account of systems with many users with limited privileges.

Maybe I am missing the point here, but the whole idea of an Admin making an account with limited privileges is so the user can't run certain apps or install things. App developers are not concerned (nor should they be) with what Admins decide on who can install or run things on a system.
Just out of curiousity, why don't you just run under the Admin account?
In Mac OS X, there is no reason why you can't run on your Admin user, because unlike most *nix style OSes the root is still disabled by default, even for the Admin user. As trpnmonkey pointed out, there are still times where you will need to activate and enable root to do things, even as the Admin.

06-10-2005, 05:32 PM

No point in using your computer with a 2nd account set as limited. The initial user you made when you first turned on the Powerbook should be your default account for everything you do. I only have a limited account for my friends and my kids on the Powermac, on my Powerbook I only have my account.

06-10-2005, 06:36 PM

Originally Posted by Acill

No point in using your computer with a 2nd account set as limited. The initial user you made when you first turned on the Powerbook should be your default account for everything you do.

If you're at all concerned about security, don't run as admin.

There are basically three categories
1. Managed: Can only run specific applications and modify some preferences, or none at all, depending on the restrictions put in place when the account was created

2. Standard: Can run all applications and modify any preferences related to his/her account

3. Admin: Can run all applications, install applications, and modify system-wide preferences.

For the most part, you only need to be Admin when you first set up your Mac. For day-to-day use, a Standard user account will be all you need.

When you do need to install applications or modify systemwide preferences the OS will usually present an authentication box for an Admin username and password. (You usually don't have to actually log in as that user.)

06-10-2005, 07:08 PM

I usually get that authentication box when I try to install something... even though I use the Admin account for day to day. Is that normal?

06-10-2005, 07:13 PM

Originally Posted by sarahsboy18

I usually get that authentication box when I try to install something... even though I use the Admin account for day to day. Is that normal?

Yes.

Amen-Moses

06-10-2005, 07:15 PM

So then what is the point of setting up a seperate Standard user for day to day uses? Seems a little extreme IMO just to protect some of the preferences.

06-10-2005, 09:34 PM

Originally Posted by sarahsboy18

So then what is the point of setting up a seperate Standard user for day to day uses? Seems a little extreme IMO just to protect some of the preferences.

I agree, I use the admin account for day to day use too, there is no point in actually doing anything other then that if you are the only user on the system. Although some of my friends have windows based pcs and I like how windows has a guest account built into the opperating sytem which gives the person enough control over the computer to do what they would do on a persons computer when they are a guest at their house, and nothing more. Although I guess you can just create a managed account with restrictions and name it guest. But yes, I do use the admin account for day to day use.

06-11-2005, 07:51 AM

Originally Posted by sarahsboy18

So then what is the point of setting up a seperate Standard user for day to day uses?

Depends on how much you trust yourself and others who may just wander up to your computer while it is logged into that account.

One of the main reasons for doing it is to stop yourself from inadvertantly deleting files that yourself would rather not lose. :p

Amen-Moses

06-16-2005, 01:09 AM

Amen-Moses and Technologist have both understood my point. I try never to run my OS'es with administrative privileges. I have both the Peecee and Mac setup with three accounts. 1 admin, and 2 managed users (for me and my girlfriend)

Simple fact is I don't trust myself (sounds wierd, I know) playing with my system after a few cold ones...and I sure as heck don't trust/care what my girlfriend wants to do with the system. With the peecee she can surf to any site she wants...go to any popup up she wants ....and it will not let her unknowingly install apps from the website she goes to.

The original point of my question was how to run certain apps with admin privileges. For instance, Tomb Raider Angel of Darkness requires admin privileges...I'd like to launch this app with admin privileges with my managed account only to play the game cause I don't know how to rewire this thing. I hope that clarifies my point.

06-16-2005, 04:26 AM

Well maybe you need to change the games ownership to your managed user.
Hit apple+i to bring up the info pane for the game and then look at the tab ownership.
Try to change the user to your managed user and see if that'll work.

Normally though it'll just ask you for your admin name and password.

06-16-2005, 11:05 AM

Originally Posted by Aptmunich

Well maybe you need to change the games ownership to your managed user.
Hit apple+i to bring up the info pane for the game and then look at the tab ownership.
Try to change the user to your managed user and see if that'll work.

Normally though it'll just ask you for your admin name and password.

Well, this is a solution, but it doesn't address my needs cause then my girlfriend can't play it. I would own the game...and only I would be able to play it. ...unless there's another way or I'm missing something here... (I guess I must have missed this point in my previous post) I did try setting 'everyone' to allow 'read and write' ability, but that didn't fix it...I'd get an error just before the actual game loads.

Oddly enough though...splinter cell allows me to share ownership of the game to all managed accounts....I still have a lot to learn about Mac OS X permissions.

06-16-2005, 06:59 PM

Originally Posted by Redbrick

Well, this is a solution, but it doesn't address my needs cause then my girlfriend can't play it. I would own the game...and only I would be able to play it. ...unless there's another way or I'm missing something here... (I guess I must have missed this point in my previous post) I did try setting 'everyone' to allow 'read and write' ability, but that didn't fix it...I'd get an error just before the actual game loads.

Oddly enough though...splinter cell allows me to share ownership of the game to all managed accounts....I still have a lot to learn about Mac OS X permissions.

You need to read up on unix permissions. particularly regarding group permissions.

If you create a group called games and make sure that all the game files are owned by that group and that the folders containing the files are also owned by that group then you can simply attach that group to anyone that needs to run the games. You cannot do this without getting terminal savvy though. :p

Amen-Moses