This is how macOS apps work by default these days. Each sandboxed app can R/W to a private "container" directory only, and to access anything else you present a

This is how macOS apps work by default these days. Each sandboxed app can R/W to a private "container" directory only, and to access anything else you present an "open" dialog that gives you back a special URL object with the requested capabilities for that resource. This is pretty fascinating: https://www.mothersruin.com/software/Archaeology/reverse/bookmarks.html https://www.mothersruin.com/software/Archaeology/reverse/boo...