Today, we’ll take a look at two ways of representing file permissions, what they mean, and how to use Chmod to change permissions on a given file.

Files on macOS have permissions defined for three subsets of system users. There are permissions granted to the single user who owns the file, the group of users the owner is associated with, and everyone else.

The values r, w, and x are pretty straightforward. They represent read, write and execute permissions respectively. The octal values are less straightforward but useful for setting distinct permissions for all user types in a single command, which we’ll look at below.

The octal values represent each possible combination of permissions as a single integer ranging from 0 to 7. Combinations of permissions have an octal value that is equal to the sum of the octal values of each individual permission being granted.

For example, write and execute (with an octal value of 3) is the sum of the values that represent execute (1) and write (2). As another example, read and write (with an octal value of 6) is the sum of read (4) and write (2) privileges.

On Mac, you can use the utility chmod to change the permissions on a given file. For example, to make a file executable for all users, you can run either of the following commands:

1. chmod ugo+x example.sh

Above, we have identified each user type we want to set the execute permission for (every type in this case), used the + symbol to indicate the adding of new privileges, and passed x to indicate the execute permission. We could also use the - symbol to indicate the removal of privileges. Furthermore, because we are setting the same permission to all user types, we can shorten the above to the more commonly used chmod +x example.sh.

2. chmod 111 example.sh

Here, we are using the octal value of the execute permission (1) to explicitly set the permission levels for each user type in the following order – user, group, everyone else.

Because we always set the permissions of the user, group, and everyone else in that order, we can use the octal values from the table above to set distinct permissions for a given file’s owner, group, and everyone else in a single command, like so:

Above, we gave the user a 6 (read and write permissions), the group a 1 (execute permission), and everyone else 0 (no access).

File permissions on Mac determine which users can read, write to, and execute a given file. This is important because when managed well, file permissions can enhance system security, but when done badly it can have the inverse effect. Above, we outlined the various types of permissions, the various user types to which permissions can be assigned, and how to go about setting these permission types.