Mojave: This gives you access to the whole system

With Mac OS 10.14 Mojave, Apple has implemented a new system that allows different applications to access system features and other applications. This is partly because there is more to watch for, but also a much more precise control over what programs are allowed to do and who can do what.

Previously, Mac OS had two different ways to give programs deeper access to the system. First, applications can request administrative privileges to install, for example, a kernel extension or add to the list of programs that start automatically, regardless of which user logs on. Secondly, programs may ask to control the computer with assistive technology, a feature that was actually intended for different programs to help people with different disabilities.

accessibility

If you open System Settings -> Security and Privacy and looking in the tab integrity are accessibility in the list on the left. Here, programs such as Textexpander who wish to self-correct a written text, whatever the program, can get permission to do so. Licensed programs here can do almost anything, so pay attention to those you approve.

In Mojave, there are two new categories in the list under Integrity: Full disk access and automation.

Full disk access

Full disk access is to give programs access to all files on the entire internal hard disk. It is necessary, for example, for backup programs, antivirus programs and possibly other programs. But you will probably have to give very few programs this state.

automation

Under Automation, the permissions for the programs end up controlling other programs and the system. The Airfoil program needs permission to control Spotify to control Spotify on a network speaker and System Events to access system sound. When a program wants to access another application, a dialog box appears in which you can say yes or no, and you can easily change the setting later in System Preferences.

For Tools and Total Disk Access settings, you must first unlock system settings with Admin, while Automation is not considered responsive and open.