1

I have a folder with about eight sub folders which contain about seventy folders containing about 10,000 files. I want to give students read access to the files, but want to prevent them from accidentally or maliciously deleting the files. Although my admin account is listed as the "owner" of the top level folder and all of its sub-folders and contents, a student with an admin account of their own can drag one of these files to the trash and delete it by using their admin privileges. Is there any way to prevent this? Can permissions be set at a root level that would prevent deletion without running a terminal command?

  • 1
    How do the students access the files - are they on a different machine? – Mark Sep 5 '16 at 22:30
  • 1
    Students should not have admin privileges! – user3439894 Sep 6 '16 at 1:31
  • You said "without a terminal command" but if they have admin access, you can't stop them from using Terminal. – WGroleau Sep 10 '16 at 1:34
4

No. Admin accounts can modify any ACL or permission you make to keep them out.

  • Admin = root on OS X

I would consider placing the files on a file server and control access over file sharing (where your account is the only admin) or remove admin permissions from the accounts that cannot be trusted to not be malicious or careless.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .