4
votes
1answer
105 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
0
votes
0answers
19 views

NFSv4 ACL with directory create perm, but can not read/write files under the directory

Next is what I need to do: Two users admin-x as directory administrator, user-m as the data producer, user 1: admin-x user 2: user-m In the directory named '/share' which with nfsv4 acls set on it, ...
0
votes
2answers
232 views

Set group permission on folder

I have a folder with lots of subfolders D:\Data\Subfolder1 D:\Data\Subfolder2 D:\Data\Subfolder3 D:\Data\Subfolder4 D:\Data\Subfolder5 ... I need to create three active directory groups ...
0
votes
2answers
56 views

Copy permissions of Windows folders

For Windows 2008 R2, is there a way to copy the permissions when you copy-paste the folder? Or a way to easily document the permissions for all files/folders?
0
votes
1answer
564 views

CIFS share on Freenas not giving full control to AD users

I've managed to setup a FreeNAS server and connect it to AD. My problem comes when I try to edit permissions from windows. I already set the owner to be an AD user that I'm logged in with, but when I ...
0
votes
1answer
478 views

Permission Denied Issue : setfacl

I have tried to set Extended ACL for the folder ssam and ended with a "Permission Denied" message at the end. I have made sure that the ACL is enabled and is added in /etc/fstab for /home. Below are ...
4
votes
2answers
696 views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
0
votes
3answers
660 views

How to set acl on my fstab file?

I would like to enable acl on my remote server. So I type the following command df to know on which partition I am : Here is the result : Filesystem 1K-blocks Used Available Use% Mounted on ...
1
vote
1answer
250 views

Setting per-directory umask using ACLs

We want to mimic the behavior of a system-wide 002 umask on a certain directory foo, in order to ensure the following result: All sub-directories created underneath foo will have 775 permissions All ...
1
vote
2answers
1k views

How to prevent file owner from changing/deleting their own file? Linux CentOS

This is NOT your standard "how do permissions work" question! I'm thinking the answer will probably involve ACL, but I don't know how exactly. I've messed around with standard permissions, guid, ...
6
votes
3answers
4k views

linux/setfacl - Set all current/future files/directories in parent directory to 775 with specified owner/group

I have a directory called "members" and under it there are folders/files. How can I recursively set all the current folders/files and any future ones created there to by default have 775 permissions ...
0
votes
2answers
250 views

How to access data in different userhomes from a single non-root user

I have Owncloud on my server running, and it saves uploaded files unter /home/uid/files. But Apache is running as a non-root user, and it can't access(write) the files under /home/uid/files. What is ...
4
votes
1answer
2k views

Share Point ACL on OSX Lion Server - Posix group always takes over ACLs

Trying to configure a share point on a Lion Server machine. The directory is created by the local server admin (serveradmin) and has rwxr-x--- given to it. The serveradmin user belongs to the local ...
0
votes
1answer
102 views

Network Service Account not Inherited in ACL

I have a problem with files that are being moved into a folder that is set to replace permissions on child objects for the Network Service account. The process is that a media file is uploaded to a ...
-1
votes
2answers
146 views

ACL on /dev/pts

Is it possible to enable ACLs for files under /dev/pts? OS is Gentoo Linux, and the kernel is 3.2.13 with grsec.
2
votes
2answers
790 views

How to write protect a directory? [closed]

I have some directories and files that looks like this one drwxr-xr-x. 2 ss ss 4096 Oct 3 2004 backup Notice the . in the permissions. The user ss can not delete this directory. Question How ...
2
votes
1answer
200 views

MSDeploy - possible to call setAcl on multiple destinations in one go?

I'm building a nice little continuous integration environment for our development team, based on TeamCity. It's working rather nicely, as it can build a mix of .NET and PHP projects, and push them to ...
3
votes
1answer
467 views

Weird permission issue with POSIX ACLs, NFS v3 on Linux

I have two Linux systems, both running Debian Squeeze. Versions of (I think) the stuff involved are: kernel: 2.6.32-5-xen-amd64 ii nfs-kernel-server 1:1.2.2-4squeeze2 ...
2
votes
1answer
393 views

Recursively apply ACL permissions on Mac OS X (Server)?

For years I've used the strong-armed-duo of these two suckers... sudo chmod +a "localadmin allow read,write,append,execute,\ delete,readattr,writeattr,readextattr,writeextattr,\ ...
1
vote
1answer
542 views

How To Grant Folder permissions for WMSvc IIS

Im using Web Deploy with IIS7 and I want to grant permissions on a web site physical folder. Ive done this before (as I have another physical folder with r/w for WMSvc) but I have forgotten how I did ...
0
votes
1answer
2k views

Force SFTP/SCP to copy files with a remote directory's permission

I am having a problem with SFTP and SCP where files that are copied are not inheriting the permissions of the remote parent directory. I have seen similar questions on serverfault where the umask of ...
4
votes
3answers
4k views

Can I override my umask using ACLs to make all files created in a given directory world readable?

Assume that my umask is 0077. I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
2
votes
1answer
341 views

Samba SGID directories and delegation of privileges

What I basically want to do, is to be able to set SGID (setgid) on certain directories from Windows on Samba shares. Reminder: Files and directories created within directory with SGID set inherit the ...
2
votes
2answers
667 views

Permission, apache user and www folder in Linux

The httpd process runs with apache user/group credential, while /var/www/html folder is owned by root user/group. What's the best practice to manage permissions on public html folder? Leave them as ...
1
vote
1answer
115 views

Delegating Windows permissions to different groups of administrators [closed]

We have some Windows servers. They are running all sorts of services, DNS, SQL Server, IIS, Oracle, etc. We want to setup a few AD groups, say DBA, WebAdmin and SAPAdmin. Then, we want to delegate ...
2
votes
1answer
507 views

Non-working ACL configuration

I want both my users 'tobias' and 'www-data' to be able to read and write to a specific directory. To that end I have chowned it to tobias:www-data, added tobias to the www-data group and added ...
8
votes
1answer
2k views

setfacl to reset file to default permissions?

I have a directory with the following default ACLs: default:user:phptutor:rwx However, none of the files/directories in that directory have that default permission (because it was added after they ...
1
vote
1answer
108 views

Matlab computations done over Apple Filing Protocol (AFP) depend on POSIX permissions, ignores ACLs

I'm a system administrator and have never used Matlab, so forgive my general ignorance of the program. My users have encountered problems when executing scripted Matlab actions over AFP to a Mac OS X ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
2
votes
1answer
608 views

Catch-all ACL attributes via CLI for Mac OS X?

It's nice and all that one can "go crazy" adding and subtracting ACL's from files/folders till the cows come home... but when doing it from the command line, say for example.. $ chmod +a# 1 "admin ...
0
votes
2answers
585 views

OSX User Directory - how did some get an ACE of group:everyone deny delete?

I know a little about ACLs from long ago experience, but have never checked them out in OSX (currently I have 10.6.7 -standard, non-server on a stand-alone iMac). I just noticed that some non-admin ...
1
vote
1answer
363 views

Permission problems with Clamfs

been trying to get clamfs working on Ubuntu 10.4. It seems like everything is working, clamfs locates infected files and prevents me from opening these. But I am having permission troubles with a ...
1
vote
2answers
412 views

Write but not delete

We are using glusterfs for our cloud storage needs. Since the partition is open to many servers, we would like to disable file deletion as we don't delete or overwrite any file. Glusterfs does not ...
0
votes
2answers
120 views

Extreme slowdown when changing folder permissions

Last Friday I attempted to set permissions on a folder containing multiple folders. I simply deleted one user group's access entry, then clicked Apply and was greeted with an hourglass. Pretty soon ...
2
votes
1answer
230 views

Copy permissions Win 2000 DC to 2008 R2 DC in new domain

ADMT 3.1 copies users with passwords and SID history from my Win2k Domain Controller (native) to a new 2008 R2 DC (R2 functional level) in a new forest/domain. Can ADMT also copy folders and files ...
2
votes
3answers
7k views

unix/setfacl: set directory default acl for correct permission inheritance

I have several svn repositories in /projects/svn which should be writeable by 2 users, mine (unix), and wwwrun (apache, for svn over http) newly created folders and file should be read/writeable by ...
2
votes
3answers
723 views

Can “traditional unix permissions” conflict with or override ACL permissions in OSX?

Can "traditional unix permissions" conflict with or override ACL permissions in OSX? Are there cumulative effects between these or are "traditional permissions" ignored when ACL permissions are ...
0
votes
1answer
116 views

oddities in interference of linux extened ACLs and 'regular' permissions

I've got some legacy code which checks that some file is read-only and readable only by it's owner, i.e. permissions set to 0400. I also need to give read-only access to this file to some other user ...
3
votes
2answers
469 views

Explain why folder's permissions differ depending on HOW user is accessing server AFP vs SSH

Hoping someone can explain what is probably fairly obvious...but confuses me. Imagine two users with admin privileges on our server (Mac OS X Server 10.5). Call them joe & bob. both users are ...
3
votes
3answers
3k views

How to allow members of a group to change file permissions on linux

I need to allow members of the group 'ftpusers' to be able to change permissions on all objects inside a certain directory. I was looking into how to do it but all I have found is how to do it on BSD: ...
3
votes
2answers
263 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
3
votes
6answers
4k views

Software to build report of NTFS permissions

Is there any software that can scan through an NTFS file system and generate an easy to read report of NTFS permissions?
1
vote
3answers
1k views

CentOS Default ACLs on Existing File System Objects

Is there a way to have existing file system objects inherit newly set default ACL settings of their parent directories? The reason I need to do this is that I have an user who connect via SFTP to my ...
2
votes
4answers
2k views

Finding all files in NTFS with specific user or group in ACL

Executive summary: I want to find all the directories and files a particular user or group has access to. In more detail: I'm looking for a command-line tool to recursively search an NTFS directory ...
6
votes
5answers
9k views

Resetting NTFS Permissions Disk Wide

Someone messed up majorly in setting permissions on an NTFS drive and I'm looking at a way to reset all permissions to default. The OS will be reinstalled but I'm trying to salvage data from their ...
1
vote
4answers
945 views

Access Control Lists in Debian Lenny

So, for my clients to who have sites hosted on my server, I create user accounts, with standard home folders inside /home. I setup an SSH jail for all the collective users, because I really am ...
3
votes
3answers
2k views

Backup data while keeping POSIX ACLs and permissions

I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
1
vote
1answer
3k views

Changing permissions with Pwershell recursive

I am trying to write a script in powershell, that will find folders recursivly and based on the folder name replace the ACL on the folder. I have folders already with the correct permissions. These I ...
18
votes
7answers
16k views

How to workaround the NTFS Move/Copy design flaw?

As anyone that has dealt with file server permissions is aware, NTFS has an interesting design feature/flaw known as the Move/Copy problem. As explained in this MS KB article, the permissions for a ...
4
votes
2answers
5k views

file ownership for new files with administrator - why is it giving ownership to the group administrators?

I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain. I see that the folder has a ...