Limit access of third party application to only one folder tree

[Opher Kahn]

I want to use a third party backup application, and backup only one folder tree with it. However, for security/privacy reasons I don't want to give the third party application general access to all of "documents" and definitely not "full disk access". Obviously I can configure the application to backup only the particular directory tree, but that doesn't inherently limit it from accessing other areas.

Is there a way to limit the application only to the folder tree I want it to backup?

The only workaround solution I can think of is place the specific directory under "Downloads" which does not contain other sensative data, and then provide the application only access to "Downloads Folder" under the "Security and Privacy" permissions, so the app won't be able to access "Documents Folder". But that is quite ugly.

 

[KeesMacPro]

I want to use a third party backup application, and backup only one folder tree with it.

With e.g. Carbon copy cloner this is very easy to do.

However, for security/privacy reasons I don't want to give the third party application general access to all of "documents" and definitely not "full disk access".

Perhaps I misunderstood , but what good is a backup that doesnt contain personal data?
If you have doubts about security/privacy leaks with this app , dont use it.
I mean , without personal data all there's left on the disk is the OS....

Obviously I can configure the application to backup only the particular directory tree, but that doesn't inherently limit it from accessing other areas.

What do you think that could happen when the app has access to other areas?

The only workaround solution I can think of is place the specific directory under "Downloads" which does not contain other sensative data, and then provide the application only access to "Downloads Folder" under the "Security and Privacy" permissions, so the app won't be able to access "Documents Folder". But that is quite ugly.

In that case you could simply copy the particular directory tree manually ; no app needed at all .

 

[Opher Kahn]

With e.g. Carbon copy cloner this is very easy to do.

Perhaps I misunderstood , but what good is a backup that doesnt contain personal data?
If you have doubts about security/privacy leaks with this app , dont use it.
I mean , without personal data all there's left on the disk is the OS....

What do you think that could happen when the app has access to other areas?

In that case you could simply copy the particular directory tree manually ; no app needed at all .

This is a work machine with sensitive information that I am not allowed to backup with 3'rd party apps, nor should the 3'rd party app be able to access it. I also have some of my own personal data (Lightroom library of photos etc), which I want to backup separately using my own backup program, to my own cloud space, etc.

Regarding the "downloads folder" solution, my private data could live there permanently, and I would back it up from there, providing the 3'rd party app access just to "downloads" which does not have other sensitive info. But it is a hack.

 

[KeesMacPro]

I understand your concern.

IMHO the problem is mixing work and private data on the same device.
You could make a dual boot setup on the main drive : 1 partition=work , 1partition for private data.
This way you'll have to reboot switching between OSs but things will be 100% separate.
Theoretically the app could still have access to the work partition, but this is easy to control thus avoid.