macOS Hid the Permission Switch I Needed

I hit a small macOS permission problem that felt more confusing than it needed to be.

An app asked for access to files on a network volume. That is the kind of prompt I usually want to understand before I accept it, so I went looking for the matching switch in System Settings -> Privacy & Security.

It was not where I expected it to be.

The frustrating part was not that macOS asked for permission. That part is reasonable. The frustrating part was that the permission did not have an obvious home in the UI after the prompt disappeared.

The Permission Was Real

The permission was not imaginary, and the prompt was not a one-off visual bug. macOS was tracking it through TCC, the system behind many privacy and security permissions.

The problem was discoverability. Some file-access permissions do not show up as top-level Privacy & Security categories. They can appear as per-app controls under Files & Folders, but only when that section is actually allowed to show the granular controls for the app.

That is where I got stuck.

Full Disk Access Masked the Controls

For the app I was checking, Files & Folders did not show the network-volume permission. It showed a greyed-out Full Disk Access row instead.

That row was easy to misread. It did not clearly answer the question I was asking: does this app currently have Full Disk Access, and where did the network-volume permission go?

The actual state of Full Disk Access lives in the separate Full Disk Access pane. In my case, the app still had an entry there. Whether that entry was enabled or disabled, its presence caused Files & Folders to hide the more specific controls I was trying to review.

Turning Full Disk Access off was not enough. The entry still existed, so the more specific controls stayed hidden.

Removing the Entry Revealed the Switches

The fix was more specific than I expected:

1. Open System Settings -> Privacy & Security -> Full Disk Access.
2. Select the app.
3. Remove the app from the list instead of only turning its toggle off.
4. Go back to Files & Folders and expand the app.

Note: If the file-access switches still do not appear, quit System Settings from the menu bar or with Command-Q, then reopen it and check Files & Folders again.

After removing the Full Disk Access entry, the file-access switches reappeared. That included the network-volume permission I had been trying to find in the first place.

That distinction matters. In this part of macOS settings, “off” and “removed” are not equivalent. An off entry can still affect what the rest of the privacy UI chooses to show.

The Command-Line Escape Hatch

The GUI is only one view of the permission database. If I need to inspect this more directly, the user-level TCC database is here:

sqlite3 "$HOME/Library/Application Support/com.apple.TCC/TCC.db" \
  "SELECT service, client, auth_value, datetime(last_modified,'unixepoch','localtime') \
   FROM access ORDER BY last_modified DESC;"

Reading that database may require the terminal app to have Full Disk Access, depending on the macOS version and the database being queried.

For revoking a specific service, tccutil can sometimes be the cleaner path:

tccutil reset SystemPolicyNetworkVolumes com.example.theapp

The bundle identifier matters, and not every permission category is pleasant to discover by name. Still, this is useful when System Settings is hiding the control I actually care about.

What Bothered Me

This is not a complaint that macOS has too many permission prompts. I would rather have the prompt than have file access happen silently.

The issue is that the follow-up path is unclear. A prompt creates a question in the user’s head: “What did I just allow, and how do I change it later?” The settings UI should make that answer easy to find.

Here it did the opposite. The permission existed, but it was tucked behind a different permission’s stale list entry. The visible label looked authoritative while hiding the controls that would have resolved the question.

That is the part worth remembering. When a macOS file permission seems to vanish from System Settings, it may not be gone. It may be hidden behind the app’s Full Disk Access entry. Remove that entry entirely, then check Files & Folders again.