What are the correct Home folder permissions?

[macstatic]

I've messed up the permissions of my Home folder (and underlying folders/files) and would like to know what the correct ones are. One of the problems is that I can't do a screenshot ("You don't have permission to save files in the location where screen shots are stored").
I'm using OSX 10.9.5 Mavericks but in the process of transferring to (clean install on another drive) to 10.11 El Capitan and thereby also moving my files over to new Users there. I want to ensure the permissions are correct before proceeding with this, and also to eliminate any problems moving the files and folders over to the new Home folders).

OK, let's say my username is "UserName", and my Home folder (right-clicking on it, then selecting "Get info"), this appears to be correct (when comparing with other Home folders on the same Mac):

UserName (me): read & write
staff: read only
everyone: read only

I've already selected "Apply to enclosed items" at this stage.


Next, for all the folders within (Desktop, Documents, Library, Music etc.):

UserName (me): read & write
everyone: no access

Is this correct? And what is "staff"?

 

[revmacian]

Below are the file permissions on my macOS Catalina install on my 2019 MBA, I have not edited anything in this regard:

My Home folder:
rwxr-xr-x

Folders inside my Home folder:
rwx------ Desktop
rwx------ Documents
rwx------ Downloads
rwx------ Library
rwx------ Movies
rwx------ Music
rwx------ Pictures
rwxr-xr-x Public

Key:
rwxr-xr-x = all access for user, read and access for group, read and access for other
rwx------ = all access for user, no access for group, no access for other

This seems to conform to the permissions that you've listed in your post. The "staff" group is an admin group. I wouldn't recommend changing file permissions or group assignments unless you know what you're doing and you're correcting a problem.

For a better understanding of BSD file permissions, here is an article that explains it better than I can:

Chapter 3. FreeBSD Basics

Basic commands and functionality of the FreeBSD operating system

www.freebsd.org

 

[gilby101]

The "staff" group is an admin group

Just nitpicking (your answer otherwise is correct): Admin type users are members of both the Staff and Administrators groups. Non-admin users are only members of Staff.

Hence we use the Staff group for allowing access by all users, and the Administrators group for allowing access only by admin users.

One thing to watch for is that, depending on context, the 'Staff' and 'Administrators' groups may be called 'staff' and 'admin'.

Is this correct? And what is "staff"?

Yes (except for the Public folder).

For 'staff', see above and this old (but still partially current) Apple support page: Permissions.

I've already selected "Apply to enclosed items" at this stage.

Doing this at your home folder level can cause problems with things further down your folder tree. The main variation which is set by default is that the folder ~/Public/Drop Box has permissions allowing 'staff' and 'everyone' to write to it, but not read - i.e. it is a drop box. This looks like:

rwx-wx-wx Drop Box

Depending on your usage this may be of no consequence to you. Just be aware of it.