Wrong file permissions in the iCloud folder

[Gnomac43]

Hello,

I found out that the files in the iCloud folder can be read by everyone in the OS, I mean every user, I don't think it's normal at all.
Not even if the laptop was only used by me it ca be considered right, do you agree?

MacOS latest version, M1 architecture.

 

[ferrarr]

Yes, if you give someone access to your Mac (logged in), they can see all of your files. If your account is not logged in and available, then others can not see your files.

 

[Gnomac43]

Yes, if you give someone access to your Mac (logged in), they can see all of your files. If your account is not logged in and available, then others can not see your files.

Thanks, but this is not normal at all, these users are not admins, or not fully admins, it's a bit complicated to explain.

So, I would expect that my user has access to only his files, same for the other users, I see it as a critical security matter.
I'll report this to Apple unless I find some justification from anyone here.

 

[Raz0rEdge]

How are you accessing the iCloud folder belonging to one user from another?

 

[Gnomac43]

How are you accessing the iCloud folder belonging to one user from another?

With the correct permissions, you can simply do it from the Finder I guess (if you are allowed to see ALL the previous folders), but the terminal is the one I used...
In any case, just having the absolute path and copying that to the Finder is enough, but I didn't find a way to do it like I'd do with Windows in File Explorer.

The point is that the permissions are terribly wrong.

 

[ferrarr]

Who set up the device?

Admin user accounts can change permissions. If you don't want other to see your files (data) change the permissions. Also change the other user accounts to "standard" accounts then they will not have access to your data.

Thanks, but this is not normal at all, these users are not admins, or not fully admins, it's a bit complicated to explain.

Try to explain it.

 

[Gnomac43]

Who set up the device?

Admin user accounts can change permissions. If you don't want other to see your files (data) change the permissions. Also change the other user accounts to "standard" accounts then they will not have access to your data.


Try to explain it.

The device was set from scratch by me, and it came straight from Apple. I formatted it several times initially for other reasons, so it should be pretty genuine .

My STANDARD user is not even part of the sudoers file, but it doesn't matter, by default, USERS should not get access to files under OTHERS (so called other STANDARD users in this case).

Make a quick test:
ls -alhrt /Users/$USER/Library/Mobile\ Documents/com~apple~CloudDocs/ (here you find your iCloud Drive files)
ls -alhrt /Users/$USER/Library/Mobile\ Documents/

Please post your result.

 

[pm-r]

My STANDARD user is not even part of the sudoers file, but it doesn't matter, by default, USERS should not get access to files under OTHERS (so called other STANDARD users in this case).

Maybe you might find some interesting and maybe helpful information here that might help you alleviate your icloud's file/folder permissions concerns:

Share files and folders in iCloud Drive on iCloud.com

In iCloud Drive on iCloud.com, share files and folders with other people, manage sharing, and stop sharing files or folders.

support.apple.com

- Patrick
=======

 

[Gnomac43]

Maybe you might find some interesting and maybe helpful information here that might help you alleviate your icloud's file/folder permissions concerns:

Share files and folders in iCloud Drive on iCloud.com

In iCloud Drive on iCloud.com, share files and folders with other people, manage sharing, and stop sharing files or folders.

support.apple.com

- Patrick
=======

Thanks.
Unfortunately this thread is about file system permission issues by default, not how to share the iCloud Drive folders, which it was interesting to see that I can do it also outside the website, that is, from Finder.