Aha, that makes sense. IIRC, the first time an app, like the Instsller.app, tries to access special folders like Downloads a pop up appears to ask for access. If you click no or perhaps hit return, access is denied and you are not asked again on subsequent access attempts unless you alter settings. Can we find a way to document that or, better, avoid it?