Mac OS 9 Multiple Users File Permissions Explained

Mac OS 9 introduced the Multiple Users feature to bring multi-user environments to the classic Macintosh platform, allowing different people to share a single computer with customized environments. Because the underlying classic Mac OS architecture and HFS/HFS+ file systems lacked native, kernel-level POSIX permissions, Mac OS 9 enforced file access and profile boundaries primarily through Finder-level software restrictions, volume-level controls, and system folder redirection.

The Underlying File System Limitations

Unlike modern Unix-based operating systems such as macOS (OS X), classic Mac OS operated as a single-user system at its core. The HFS and HFS+ file systems did not possess integrated file-ownership metadata or Access Control Lists (ACLs) for local accounts. Instead of securing files at the kernel level, Mac OS 9 relied on a set of system extensions—primarily the "Multiple Users" control panel and its background extensions—to intercept file system requests and enforce access policies within the operating system's graphical environment.

Account Types and Access Levels

Administrators could configure three distinct account types, each governed by different access rules:

  • Normal Users: Maintained standard access to the computer, similar to a traditional single-user Mac OS installation. They could open most applications and access general files, but they could not modify the Multiple Users settings or alter the environments of other profiles.
  • Limited Users: Restricted to a simplified Finder interface. Administrators could specify which applications these users were allowed to launch, restrict access to control panels, and prevent system-wide changes.
  • Panels Users: Designed primarily for children or educational settings, this mode replaced the standard desktop and Finder entirely with a tile-based "Panels" interface containing only explicitly approved documents and applications.

Folder Structure and Redirection

When Multiple Users was enabled, Mac OS 9 created a centralized directory named "Users" at the root level of the startup disk. Inside, subfolders were generated for each profile alongside a "Shared" folder.

  • Private User Folders: Each account received its own isolated environment containing a personalized Desktop folder, Documents folder, and user-specific Preferences folder. When a user logged in, the system dynamically redirected standard file paths so that the user saw only their customized Desktop and personal Documents.
  • The Shared Folder: This directory functioned as a universal drop location where files could be placed for all users on the machine to access.
  • System and Application Protection: By default, Limited and Panels users were blocked from altering files inside the System Folder, the root directory of the hard drive, or other users' individual directories.

Volume and Peripheral Access Controls

Administrators could fine-tune file permissions beyond standard folder boundaries. Through the Multiple Users control panel, administrators could explicitly designate:

  • Hard Drive Visibility: Internal or external partitions could be completely hidden or set to read-only for specific profiles.
  • Removable Media Rights: Profiles could be blocked from inserting and reading floppy disks, Zip disks, or CD-ROMs, preventing unauthorized file copying or software execution.

Security and Enforcement Weaknesses

Because file permissions were maintained exclusively through Mac OS 9 system software and extensions, the security was essentially cosmetic rather than cryptographic.

Users could easily circumvent all access rules and view any file on the drive by restarting the computer and holding down the Shift key to disable extensions, or by booting the machine from an external drive or a system CD-ROM. True local file permissions, granular read/write/execute flags, and secure cryptographic separation were not fully implemented on Apple computers until the release of Mac OS X.