Allowing Outset-run scripts to have access to user folders

Because of TCC/PPPC, which Apple introduced in macOS 10.14, scripts and applications have to ask for permissions to do certain things, especially things like reading user home directory files.

If you have an Outset login script that tries to access something in the home directory, you may find in the ~/Library/Logs/outset.log that you get a Failure processing [name of script, command that failed] Operation not permitted error.

I tried creating a PPPC profile for the script itself. That didn’t work. I tried creating a PPPC profile for /usr/local/outset/outset. That didn’t work. I tried creating a PPPC profile for /bin/zsh. That didn’t work. I tried creating a PPPC profile that allowed all three to have access to all files. That didn’t work.

So, finally, I ran a tccutil reset All to reset the database, and then I logged in again, and it asked for Python to have access to the home folder the script was trying to read.

So I created a PPPC profile to allow Python (the one Outset is using) to have access to the home folder the script was trying to read, and the script ran just fine.

I’m not an expert on this, and any follow-up questions you have would probably be best directed to the #outset channel on the MacAdmins Slack (I’m over there too) instead of in the comments of this post (blog comments aren’t a great venue for tech support), but I thought sharing one case that worked might be helpful for others running into the same issue.


Posted

in

by

Tags:

Comments

4 responses to “Allowing Outset-run scripts to have access to user folders”

  1. abrdfd Avatar
    abrdfd

    Have you had success with this method for also running Offset scripts then? Or has Offset fully sunsetted?

    1. alanysiu Avatar
      alanysiu

      I’m not maintaining Offset, but as far as I know it still works.

  2. Chris Waldrip Avatar
    Chris Waldrip

    So, are you creating the PPPC profile for the /Library/Frameworks/Python.framework/Versions/3.X/Python file? I’ve given it access to All Files and even Desktop and Documents (redundant I think). I’ve created a profile for this file and still get a prompt to allow access for “python3.9” to access Documents and stuff. :-\

    1. alanysiu Avatar
      alanysiu

      It’d be /Library/Frameworks/Python.framework/Versions/3.9/bin/python3.9

Leave a Reply to abrdfd Cancel reply

Your email address will not be published. Required fields are marked *