Thank you for your review
Email me when discounted: 

Sandbox... For years, standard POSIX permissions did a good job of defining access to our files and folders. But as our needs have become more complex, operating systems have begun implementing access control lists to help handle things. When Apple shipped Mac OS X 10.4, they added a robust granular permissions model. Unfortunately, only Mac OS X Server ships with a GUI for manipulating these permissions.

Enter Sandbox, stage left. What does Sandbox have to offer you? An organized, full-featured GUI for editing Mac OS X's access control lists. A software update system so you never have to come back to this page to check for more...

What's New

Version 2.2: Release notes were unavailable when this listing was updated.


Mac OS X 10.4.4 or later, and some understanding of how access control lists in OS X 10.4 work.

About that last requirement: Sandbox is a tool for server admins and engineers, and power users—generally intended for those who have at least the fundamentals of ACLs under their belts, and not your typical home user. Apple's File Services Administration documentation is a good place to start to gain an understanding of how the system works.

Similar Software

Open Comparison
Suggest Other Similar Software
Leave a Review

Sandbox User Discussion

Nobody has reviewed or commented on this app yet. Add your own comment and get a discussion going!
Sort by: Time | Smiles
Michael-Vilain Member IconReview+79

tried running this on 10.6.8 and it threw and exception after entering the admin username and password. Any way to contact this developer is obfuscated so that tells me he's not interested in fixing problems. That's why I think think this app should be given a wide birth. Don't trust it or it's developer.

Pity. I so wanted to like it. Went with TinkerTool System.

Reply2 replies
Version 2.2

It's common practice to obfuscate email addresses with simple human-readable puzzles like removing the @ symbol and substituting it with the word "at". Who knows if it's really effective against spambots, but I don't blame him for trying.


Even sending email to mikey-san@bungie.org fails. His domain's mail server seems to be filtering all email unless it's tagged a cetain way. Most likely a challenge/response system. Clearly, he's done with this tools and doesn't want to be bothered.

Cerniuk Member IconComment+184

First fired it up and it yields two AppleScript errors:

Pressed the "Inspect Folder…" button and

The variable theCell is not defined. (-2753)

Then dismissed the dialog, was presented with a file picker (not the one typically shown by the OS) and when I scrolled I got:

Can’t set «class disC» of «class broW» id 20 of «class splV» id 19 of window id 18 to "". (-10006)

Sorry, but that makes me very nervous about running this utility and then having my disk in even worse shape than the OS put it into...

Reply0 replies
Version 2.2
6502addict Member IconComment-6

The need for an admin id/password is annoying and unnecessary.

Reply1 reply
Version 2.2

Changing permissions/ACLs often requires administrator privileges. If Sandbox saved the admin password, people would be complaining in the next breath that it was a security hole.

Brandon Edling Member IconReview+2
Brandon Edling

Now that Apple has moved FileSharing from WGM to ServerAdmin, this makes more sense... and it's gotten quite a bit nicer as well (from what I can remember from three years ago!)

Reply0 replies
Version 2.2
nytewurk Member IconReview+2

Nice. Looks and feels quite well put together. Seems to take good advantage of the POSIX ACL API within OS X. Just started using it so I'm not sure if it's doing it's job reliably.

Always glad to see a developer making the effort to introduce more security related software to the macintosh platform. Not enough of it. Thanks. Keep it locked.


Reply0 replies
Version 2.1
Brandonedling Member IconComment+1

Perhaps I'm missing something, but why not just use Workgroup Manager?

Reply3 replies
Version 1.2.2
Anonymous Member Icon

The Workgroup Manager exists only in OS X Server. Without a third party application to do the job, the only way to enable ACLs in OS X client is on the command line.


Because WGM is not that great, even on Server. Sometimes it just won't set the permissions.. glad to see an alternative.. :-)


While Sandbox is certainly great you can also use Workgroup Manager on OS X Client by downloading the Server Admin Tools from the Apple site. You don't need to use OS X Server to use these tools.

user icon+0
Version 2.2
user icon+2
Version 2.2
> 4 5


Current Version (2.x)


Downloads 27,999
Version Downloads 21,589
License Free
Date 11 Jul 2008
Platform OS X / PPC 32 / Intel 32
Price Free
Learn how MacUpdate Desktop makes installing apps from MacUpdate.com one-click easy.
Next time, install Sandbox with 1-click

Learn how MacUpdate Desktop can install apps on MacUpdate with the simple click of the Install apps with MacUpdate Desktop icon. Plus, keep all your apps updated. Play video...