command linemojave
Is there a Terminal command to view a list of all macOS that are authorized and unauthorized but have asked for Full Access?
I am looking for the list that is displayed under System Preferences → Security & Privacy → Privacy → Full Disk Access, but via command-line.
You are possibly doing it incorrectly.
First of all, sudo typically requires a password to be typed, and that won't happen via a Web app.
Second, the _www user doesn't get to use sudo. That's a big security hole. Don't even think of modifying sudoers to allow it.
What you should be doing instead is allow the _www user (the one the webserver runs as) access to the chat.db file, like this:
sudo chgrp _www ~/Library
sudo chgrp _www ~/Library/messages
sudo chgrp _www ~/Library/messages/chat.db
chmod g+rx ~/Library
chmod g+rx ~/Library/messages
chmod g+r ~/Library/messages/chat.db
If you want to access special directories/files such as ~/Library/Application Support/AddressBook or ~/Pictures/Photos Library.photoslibrary, yes you need to give Full Disk Access to iTerm2. If don't, you can not access those directories.
For more information, here is the iTerm2 wiki https://gitlab.com/gnachman/iterm2/wikis/fulldiskaccess
Here is the screenshot when you don't give Full Disk Access to iTerm2.
Best Answer
The sqlite queries mentioned DO work, e.g.:
The trick, however, is that you need full-disk access to access that SQLite database, so depending on where you're trying to do this, it's a chicken-and-egg problem. For just testing purposes, you can give your terminal full-disk access, then you'll be able to run the command.