In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

0
votes
0answers
9 views

An application only allows specification of the root of an administrative share for temp folder

I'm trying to figure some things out second hand about configuring a portion of an application (BMC Remedy) that, if I understand correctly, only allows configuration of this feature to use the root ...
0
votes
1answer
59 views

PHP exec() over UNC path on Windows

My environment is Windows Server 2012 R2, IIS 8, Active Directory, and a file share. IIS, AD, and the file share are all separate VMs. I have a website, www.example.com, set up in IIS. The ...
0
votes
0answers
15 views

ISAPI DLL in a UNC Network Share

I am trying to set up an ISAPI DLL in a UNC network share (shared between two load balanced servers). This works just fine if I store it on the local storage of each server. However, when I change ...
4
votes
2answers
156 views

Windows user can overwrite NFSv4/Solaris ACL permissions of files on CIFS/SMB share (grant himself full access), how do I prevent this?

I have SMB/CIFS file sharing set up on an OmniOS server with the Solaris kernel module which uses NFSv4 ACLs that should work correctly with Windows clients. I want to create a shared directory with ...
-3
votes
3answers
56 views

What should the owner of `.` and `..` directories be? [closed]

A few questions about the . and .. directories: ls -la drwxr-xr-x 3 root root 4096 Mar 21 12:47 . drwxr-xr-x 60 root root 4096 Mar 15 14:36 .. Are . and .. actually directories or are they like ...
1
vote
2answers
89 views

Force windows to prompt authentication to shared folder/disable “remember my credentials”

Is there a way to force windows to prompt for credentials to a shared folder? We are in a domain environment with 50+ PCs. What I need is to have a shared folder on our server that has specific user ...
1
vote
0answers
44 views

SQL Server Agent job run as: permissions

I have a number of SQL Server Agent jobs running CmdExec statements. They are simple jobs that call simple batch files. They are run with a Run As: Proxy account, that has permissions to run as a ...
1
vote
1answer
21 views

running pg_dump with the context of a user

$ whomi admin $ pg_dump (it works....) $ sudo pg_dump doesn't work. (permission denied) $ sudo -u admin pg_dump still doesn't work (permission denied). why is that? I need to run pg_dump from ...
0
votes
0answers
22 views

Local users - Modify group membership without “elevated” rights

I have a Microsoft NPS server that we are using for MAC Authentication in our network. This server is NOT domain joined. Due to contractual requirements, I am not allowed to have 'elevated' rights ...
1
vote
0answers
50 views

logrotate as non-root user for files with various owners

I have a collection of log files with various owners. Each log file corresponds to one of a suite of programs, and the permissions are group writable so that whoever starts the program(s) can write to ...
1
vote
1answer
66 views

Limited Permissions to a domain user on AD Server

How to assign permissions to a domanin user such that he can only change active directry users password & he can be able to join or remove Client computers to the domain. He should have admin ...
0
votes
0answers
16 views

ubuntu service not working (permissions?)

I'm trying to set up a service task in init.d for freeradius. At boot, everything runs fine: radiusd binary is started and switches to user radius (as configured) When I try 'sudo service ...
0
votes
2answers
65 views

Domain Administrator does not have permission to remove a folder

I am a Windows domain administrator, and on my Windows 7 machine I have a folder that is owned by another domain user. When I right click and attempt to delete, it tells me that I don't have ...
0
votes
0answers
53 views

The account “Everyone” could not be mapped to a SID

I have a script that enables sharing on a folder an sets the sharing permissions. The script works fine with one exception which is the most important one if you wanna generate a HomeUse-Directory. I ...
-2
votes
1answer
46 views

How to change primary group on Windows without ActiveDirectory?

I have a Windows Server 2012 R2 using WorkGroup only (no Active Directory) with some local users and groups. Is that possible to change the primary group of some local users? I couldn't find a ...
0
votes
0answers
29 views

Setting up Active Directory, Adding Machines with Different OSes & adding a server with an instance of SQL

I have 2 servers to manage at work, a Dell Poweredge with has a software called "Abecas" which uses SQL Server, The Poweredge is running Win Server 2008, there is no AD in place as of yet. I have ...
0
votes
0answers
15 views

Security breach: PHP files are being created over http posts. IIS 7.5 [duplicate]

I have a Windows Server 2008R2 / IIS7.5 hosting several Wordpress websites. The server is fully patched and all Wordpress sites are running the latest versions of Wordpress and all WordPress plugins ...
0
votes
0answers
21 views

openldap home directory permissions for different users

we are testing openldap server for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to save data on desktop ...
1
vote
2answers
43 views

What permssion is needed to read AD attributes?

I have created some custom attributes for users inside of Active Directory and have also created a basic account to use to login to AD so it can read these attributes, as well as the standard ones in ...
-1
votes
1answer
30 views

samba openldap user file premissions

we are testing openldap server with samba3 backend for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to ...
1
vote
2answers
18 views

SQL Server domain-group based login

I have a couple clustered SQL server instances, 2 on 2014 and 1 on 2008r2. In all 3 cases, I've created a SQL login (server principal) for a domain group, say DOMAIN\SqlAdmins. I grant it the ...
0
votes
1answer
64 views

Cannot connect remotely to a shared folder inside a vhdx

I am using Windows 10 to connect to a Windows Server 2012 R2 (VM) installed on a Hyper-V core host. The VM is set to share a second virtual disk where I allowed previously share and gave full control ...
2
votes
2answers
206 views

Allowing httpd to run a bash script in /usr/bin/

Migrating a system from CentOS6 to RHEL7 with SELinux running Enforced. A php script makes a call to /usr/bin/processdata.sh to generate some data behind the scenes. This worked fine with the old ...
1
vote
2answers
48 views

Recursive Sudo Privileges

I am in the process of setting up specialized sudo for our first line support team. I would like to authorized them to delete anything within /var/log/. The command below however only applies to files ...
0
votes
1answer
37 views

SUDO command only works as root (Solaris 10)

After installing sudo in the system i am unable tu run sudo as a non-root user, when i try to execute any command i get: /usr/local/bin/sudo: cannot execute if i edit /etc/passwd to use a different ...
0
votes
1answer
29 views

Deny permissions on Exchange Public Folder

I have a public folder to which all members of our staff group have access. I need to deny access to this folder for one member of the group. Is there a way to do this? For regular folders I can just ...
0
votes
1answer
31 views

Comparing/Matching ACLs

Rather it be through PowerShell or another tool here is what I'm trying to accomplish and where it stems from. We have Junction points on one volume and the Target folders on another volume. ...
1
vote
0answers
53 views

Windows service control commands for non administrator user

we have two environments, staging and production, both running a windows service. we use a build server to deploy a certain windows service via MSDeploy part of the build steps is running a CMD ...
0
votes
1answer
76 views

IIS7 setting user permissions for network drive directory

I have IIS7 server (where i running some PHP) on network drive (drive 1), when im trying acces another network drive (drive 2), where are need to acces PDF files with pdftotext.exe. On drive 1 i also ...
1
vote
0answers
55 views

Using UNC Share with IIS ASP.NET 4.6.1

I have some ASP.NET 4.6.2 web sites that I want to run from a UNC share. The reason why I am doing this is to implement IIS Shared Config but as a first step I just want the nodes to run properly. ...
0
votes
1answer
42 views

Prevent deletion of folder but let access to everything inside of it

I know there is the +i flag for files and directories, but i have a deeper Problem. Is there a way to prevent a folder from being deleted by an User which should be able to create / access / remove ...
5
votes
2answers
60 views

Reliably copy files on Windows, whatever the ACLs [closed]

I often need to do a quick backup of some user data. And often I have an error message stating the ACLs do not allow to copy the whole data. So I have to modify the source ACLs, which is not a desired ...
0
votes
0answers
210 views

MySQL /nonexistent home vs “No directory, logging in with HOME=/”

The preinst script in the Debian/Ubuntu packages for MySQL sets the default home directory for the MySQL server to /nonexistent, presumably as a security measure - the MySQL server has its own datadir ...
0
votes
2answers
21 views

Security filtering not working in GPO

Not sure if this would be the right place to ask this. On my domain controllers, I have created all my users and computers inside an OU. I have a group named Support which is in the local admins group ...
0
votes
1answer
47 views

Grant local group local admininstrator perms

I am not "allowed" to add users directly to the administrators or remote desktop user groups due to internal reasons (This is all local). I have successfully created the new local group and added my ...
1
vote
0answers
61 views

Permissions denied to directory owned by a user

I have a similar problem to that posted here, in that a user is unable to access the contents of a directory they own. A quick search shows quite a few other similar questions, however the problem ...
0
votes
1answer
39 views

What file access problems does the “You are about to change permissions on the root directory of the startup disk…” warning refer to?

In an AD environment as a local admin to a server, I went to give a colleague full permissions to a drive (right-click the drive, Security, Edit, add him and give him some rights) temporarily while ...
2
votes
0answers
53 views

Allow ssh when g+w on user's home directory

Is it possible to allow one user to connect via SSH when that user's home directory is g+w? As I understand it, I can allow this if I set StrictModes no in /etc/ssh/sshd_config, but that would mean ...
2
votes
2answers
77 views

Linux: Allow user to execute specific command on behalf of any other user

I am trying to find a way to allow user john to execute a command (say echo) on behalf of another user peter without being prompted for password. I found a thread that I thought would be the answer ...
-1
votes
1answer
49 views

How to hide 'Shut down' button from an AD group assigned in local Administrators group (Windows Server)? [duplicate]

Basically I need to grant a group full local administrative permissions but hide or disable the shutdown button for them in the start menu. We have Windows servers from 2008 to 2012. I did my ...
1
vote
0answers
127 views

Microsoft VBScript Runtime error: Permission denied code 800A0046

I am testing a VBScript and it was working fine earlier. Wanted to try with a different file input, but all of a sudden I'm getting Microsoft VBScript Runtime error: Permission denied code 800A0046. ...
0
votes
0answers
39 views

Exporting privileges from Mysql - Something is missing

I used a little bash function to export MySQL privileges from a server (see http://serverfault.com/a/13050/238291). Works well, used it multiple times and never had an issue (although I do have to sed ...
1
vote
0answers
39 views

Does the secure attention sequence interfere with any rights? [closed]

Are there any known issues regarding Rights when 'Disable or enable software Secure Attention Sequence' has been disabled? 'If you set this policy setting to "Services," services can simulate the ...
-1
votes
1answer
37 views

Nginx Not Respecting File Permissions

I'm trying to apply permissions of 600 to certain files on my web server, but they are still accessible to the world (I can access them by navigating to direct link in browser e.g. ...
0
votes
0answers
16 views

OS X 10.10 Mail.app - preferences resetting themselves

I cannot change the preferences for Mail... if I select a different setting, it instantly reverts to what it was before. ls -l Library/Mail/V2/MailData shows that I own all the plists, they're ...
0
votes
0answers
106 views

samba 4 create mask not working

I have following samba config [global] server string = %h server (Samba, Ubuntu) server role = standalone server map to guest = Bad User obey pam restrictions = Yes ...
0
votes
1answer
37 views

How does apache execute files without execute permission?

This is how my code file permissions are set up: groups apache > apache : apache www groups user1 > user1 : user1 wheel www Meaning there is a dedicated group for apache and user1. ...
0
votes
1answer
62 views

Can't create files with `ubuntu` user under `/var/www`

I've added ubuntu user to the www-data group and set the folder permissions as follows: sudo gpasswd -a "$USER" www-data find /var/www -type f -exec chmod 0640 {} \; sudo find /var/www -type d -exec ...
-2
votes
2answers
39 views

2003 domain; no domain admins can RDP [closed]

small 2003 domain with <50 clients. Today I was unable to RDP to my usual set of servers using my domain admin account. I get the error of: "To logon to this remote computer, you must be granted ...
0
votes
1answer
89 views

Samba server permissions not work

I have Samba server installed on Ubuntu 14.04 LTS I set up some smb shares for everyone. For example this is a part of my smb.conf: [logs] path = /srv01/logs browsable = yes ...