Unix file permissions can take many shapes: symbolic (ug+rw), octal (660) or a list of characters (drw-rw----). This library enables using any of these (instead of being limited to a single one) with any Node.js or CLI command.

This library can also perform operations on Unix permissions such as: testing, setting, unsetting, normalizing and inverting.

Monthly Downloads: 0
Programming language: JavaScript
Tags: Nodejs     Security     Terminal     CLI     Shell     Unix    
Latest version: v2.0.0

unix-permissions alternatives and similar modules

Based on the "Security" category

Do you think we are missing an alternative of unix-permissions or a related project?

Add another 'Security' Module


Codecov Build Node Gitter Twitter Medium

Swiss Army knife for Unix permissions.

Unix file permissions can take many shapes: [symbolic](docs/types.md#symbolic) (ug+rw), [octal](docs/types.md#octal) (660) or a [list of characters](docs/types.md#stat) (drw-rw----). This library enables using any of these (instead of being limited to a single one) with any Node.js or CLI command.

This library can also perform operations on Unix permissions such as:

  • [testing](docs/API.md#containpermission-permissions), [setting](docs/API.md#setpermission-permissions) and [unsetting](docs/API.md#notpermission). Using bitwise operations (|, &, ^, ~) can be tedious and error-prone otherwise.
  • [validating](docs/API.md#normalizepermission) syntax.
  • [normalizing](docs/API.md#normalizepermission). For example u+r,u+w can be shortened to u+rw.
  • [inverting](docs/API.md#invertpermission). For example a umask of 117 means new files will be created with 661 permissions.
  • checking the [minimal](docs/API.md#minpermissions) or [maximal](docs/API.md#maxpermissions) permissions among a list of them. This can be useful to aggregate all the permissions of several files, e.g. during a directory recursion.

Permissions are manipulated as strings, not as file paths. This means you must use other utilities (such as chmod or stat) to get and set file permissions using those strings.


In JavaScript:

<!-- eslint-disable no-sync -->

// Retrieve a file's permission as an object like
// `{ user: { write: false, read: true, ... }, ... }` instead of a number

// Set a file's permission using `symbolic` notation instead of a number
fs.chmod('/etc/passwd', convert.number('a=r'))

// Set a file's permission using `symbolic` notation instead of a number
fs.writeFile('/my/file', content, { mode: convert.number('a=r') })

// Disallow executing new files using `umask`

// If your library takes Unix permissions as input, using
// `unix-permissions` under the hood lets your users choose their
// favorite Unix permissions type.
myLibrary.method({ mode: 'a-wx' })
myLibrary.method({ mode: '444' })

On the command line:

$ stat -c "%a" /etc/passwd

$ unix-permissions convert.symbolic "$(stat -c "%a" /etc/passwd)"


You can try this library:

  • either directly in your browser.
  • or by executing the [examples files](examples/README.md) in a terminal.


npm install unix-permissions

Usage (JavaScript)

const { convert } = require('unix-permissions')

// `permission` will be set to `rw-rw----`
const permission = convert.stat('660')

Several methods other than convert are available but they mostly follow the same pattern. Permission strings are passed as input and returned as output.

Usage (CLI)

$ unix-permissions convert.stat 660

The same methods as in JavaScript are available. Exit code will be 1 if an error occurred, e.g. if the permission syntax is invalid.

Permission types

You can use any of the following permission types as input. You can also [convert()](docs/API.md#convertoctalnumberstatsymbolicobjectpermission) between them:

  • [octal](docs/types.md#octal) strings like "422"
  • decimal [number](docs/types.md#number) like 274
  • [stat](docs/types.md#stat) like rw-rw-r--
  • [symbolic](docs/types.md#symbolic) like a+rw
  • [object](docs/types.md#object) like { user: { read: true, write: false, execute: false }, group: { write: false }, others: { write: false } }

Special permissions (setuid, setgid, sticky) can be used.

Please see the [types full documentation](docs/types.md).



Converts permission to another type.\ [Full documentation](docs/API.md#convertoctalnumberstatsymbolicobjectpermission).


Returns the permission's type or invalid.\ [Full documentation](docs/API.md#typepermission).


Normalizes a permission to its canonical shape. Throw if permission is invalid.\ [Full documentation](docs/API.md#normalizepermission).


Removes all negative permissions.\ [Full documentation](docs/API.md#positivepermission).

contain(permission, permissions...)

Tests whether permission includes permissions.\ [Full documentation](docs/API.md#containpermission-permissions).

equal(permission, permissions...)

Tests whether permission equals exactly permissions.\ [Full documentation](docs/API.md#equalpermission-permissions).

set(permission, permissions...)

Sets permissions on permission. This is useful to avoid error-prone bitwise operations (|, &, ^, ~).\ [Full documentation](docs/API.md#setpermission-permissions).


Inverts permission including special permissions. This can be used in combination with set() to unset permissions instead of setting them.\ [Full documentation](docs/API.md#notpermission).


Inverts permission and removes special permissions.\ [Full documentation](docs/API.md#invertpermission).


Retrieves the lowest permissions among all arguments.\ [Full documentation](docs/API.md#minpermissions).


Retrieves the highest permissions among all arguments.\ [Full documentation](docs/API.md#maxpermissions).


If you found a bug or would like a new feature, don't hesitate to [submit an issue on GitHub](../../issues).

For other questions, feel free to chat with us on Gitter.

Everyone is welcome regardless of personal background. We enforce a [Code of conduct](CODE_OF_CONDUCT.md) in order to promote a positive and inclusive environment.


This project was made with ❀️. The simplest way to give back is by starring and sharing it online.

If the documentation is unclear or has a typo, please click on the page's Edit button (pencil icon) and suggest a correction.

If you would like to help us fix a bug or add a new feature, please check our [guidelines](CONTRIBUTING.md). Pull requests are welcome!

<!-- Thanks go to our wonderful contributors: -->

<!-- ALL-CONTRIBUTORS-LIST:START --> <!-- prettier-ignore --> ehmickyπŸ’» 🎨 πŸ€” πŸ“–