In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

5
votes
4answers
20k views

Permission denied but group permissions look good on redhat

I have a user ftpadmin: -bash-3.2$ id ftpadmin uid=10001(ftpadmin) gid=2525(fsg) groups=2525(fsg),10005(git) The important group to note is "git" Then I have my git repository: ls -al drwxrwxr-x ...
4
votes
2answers
156 views

Windows user can overwrite NFSv4/Solaris ACL permissions of files on CIFS/SMB share (grant himself full access), how do I prevent this?

I have SMB/CIFS file sharing set up on an OmniOS server with the Solaris kernel module which uses NFSv4 ACLs that should work correctly with Windows clients. I want to create a shared directory with ...
4
votes
1answer
1k views

How to reset service permissions after messing up with `sc sdset`?

After applying this "solution" I have no way of starting the spooler service, not even as Admin. If I open services.msc as Administrator, that service has disappeared, as noted here (I wish I found ...
4
votes
1answer
21k views

How to add NETWORK SERVICE to Users permission group?

I'm adapting an application from a different server, their installation guide tells me to Add Server Name\Network Service identity to Users permission group. So how can I? I've tried: Via ...
4
votes
1answer
2k views

How to grant permissions to Network Service to write in a remote location

I need to grant permissions to the Network Service account to write on a different machine on the same network. Can you tell me which permissions I should add? Thanks! EDIT From ...
4
votes
4answers
7k views

Which user does PHP/IIS6 use to read/write files?

I've installed PHP5 (FastCGI) on IIS6 and is just wondering which windows user PHP uses to access the file system? With ASP.NET for example, the ASPNET account is used to access the file system. But ...
3
votes
0answers
327 views

NFS Write Permissions — ls -l shows I have it; I actually don't

I have an NFS server serving several clients. Permissions work fine with all clients except one. The client mounts the nfs share fine, with permissions all correctly placed to the right users. ...
3
votes
2answers
517 views

Security of symlink to directory outside webroot set to 777?

I have a few websites that use the same cached weather reports so I wanted them all in the same folder. It seemed the most logical way to do this would be to but this folder outside of the webroot. It ...
3
votes
2answers
5k views

CACLS “Access is denied”

I am on Windows Server 2008. I'm trying to set deny permissions for a certain user on the Windows folder with the following command: cacls Windows /E /D sneakyUser I get the error message ...
3
votes
2answers
28k views

Grant permission in Active Directory to add users / modify / changed password / add them to group them but not delete them

I would like to add delegate user ability to: add new users to container change password modify group membership modify users properties (such as email / name etc) move users between OU's ...
3
votes
2answers
3k views

How do I set permissions on network shares to allow SYSTEM account access in server cluster?

I want to share common data within a cluster of servers via network shares. There will be one share folder on each server, which all the other servers can access. The server processes that will be ...
3
votes
3answers
8k views

Server 2008 Roaming Profiles Permissions

I'm having an issue setting up roaming profiles in Windows Server 2008 R2. The roaming profile is not being created on login/logoff with the user and they constantly have a temporary profile. I have ...
3
votes
5answers
7k views

IIS 7.5 401.3 Access Denied

I am having this weird issue with IIS 7.5 on Windows 2008 R2 x64. I created a site in IIS and manually created a test file index.html and everything worked. When I try to do a deployment, I copy all ...
3
votes
2answers
306 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
2
votes
1answer
796 views

Samba Ignoring POSIX ACLs

I have an Ubuntu 10.04.4 LTS server running Samba, and joined to our Active Directory domain using PBIS (formerly likewise-open.) Samba is configured to do authentication using AD users/groups, and ...
2
votes
1answer
83 views

Permissions and Groups on a New Server

I set up a new instance of Ubuntu 12.04. This has, of course, the root user. I have apache running and it has it's own user and group and I created a single ftp user as well (that has it's own user ...
2
votes
2answers
1k views

changing permissions for a network share takes longer on win2008 than on win2003, why is that?

Given a network share accessible for "everyone" in the domain, containing several 1000 files and folders When I change permissions for this share from read/write to only read (or vice versa) on ...
2
votes
1answer
363 views

Suexec, group-writeable files

I am running an Apache server with Suexec. However, I get an internal server error if I try to execute a CGI script that is group-writeable (if I chmod g-w , the script runs fine) However, I want the ...
2
votes
2answers
419 views

Any way to change the default umask for Apache2?

When Apache writes new files (static content, like writing to the cache file) it creates this file without the proper permissions. There's no write permission for the group by default and this causes ...
2
votes
2answers
444 views

Determing the Execution Environment of Apache

I am having this error: [Mon Dec 05 10:22:23 2011] [warn] mod_rewrite: Running external rewrite maps without defining a RewriteLock is DANGEROUS! [Mon Dec 05 10:22:23 2011] [error] (13)Permission ...
2
votes
1answer
141 views

new installation of windows 2008 R2 … having permissions issues (everyone has access)

I can not limit access to the IUSR user nor the IIS_IUSRS group at all....not even a different user that I tried for anonymous access. When I say IUSR below, I also mean I've tried adding the group ...
2
votes
3answers
2k views

Change the permissions and take ownership of shared files

I have domain controller (windows server 2008) with shared folders. I am logged in as administrator. I try to take ownership of a shared folder using the command takeown /f <File name> /a /r. ...
2
votes
4answers
3k views

Using SELinux to force Linux to allow programs to bind to port numbers lower than 1024

Is there a way in SELinux to force linux to allow a program to be able to bind to a port number lower than 1024.
2
votes
1answer
3k views

How can I enable ahadmin properties?

I need to run dcomcnfg.exe on a Windows Server 2008 and in Component Services\Computers\My Computer\DCOM Config, select the “ahadmin” COM+ package and add a new Endpoint. Problem is that I can't do ...
2
votes
3answers
1k views

Unable to connect to my own system through SSH

My Fedora system is connected to the internet through a proxy server and we have IPs assigned to every system connected via LAN - mine has 192.168.0.103 (by the way, what is this kind of IP called? ...
2
votes
1answer
2k views

Give users the right to restart a service

Based on http://serverfault.com/questions/166641/how-to-give-rights-to-one-user-for-the-restart-of-a-service I've tried the command sc sdset My.Service (A;;RPWP;;;S-1-1-0) which i believe should ...
2
votes
1answer
6k views

RHEL - NFS4: Mounted/Exported as rw, user write permission denied

I have nfs4 configured between a RHEL 5.3 server (charlie) and a RHEL 5.4 client (simcom1). The machines are configured to authenticate users via kerberos by a Windows Server 2008 active directory ...
2
votes
2answers
9k views

Plesk file permissions - Apache/PHP conflicting with user accounts

I'm building a Drupal site which performs various automatic disk operations using the apache user (id=40). The problem is that the site was set up on a subdomain belonging to user ID 10001 (ie my ...
2
votes
4answers
987 views

PHP session files have permissions of 000 - They're unusable

I kept having issues with a Document Management System I'm trying to install as, at the first step of the installation process, it would error with: Warning: Unknown: ...
2
votes
4answers
1k views

Filesystem permissions on Unix

If I have a folder specified as not-readable. Are all folders under it also non-readable? For example, my shared hosting home account directory is not accessible to other accounts, so, are all folders ...
2
votes
1answer
9k views

How to mount external vfat drive as user?

I have a mountpoint /mnt/v1 and a user bak in group bak. I did this: sudo chown bak:bak /mnt/v1 sudo chmod 775 /mnt/v1 Now I want to mount an external fat32 drive with partition /dev/sdb1 to this ...
2
votes
2answers
4k views

How to set permissions on registry keys from the command line?

There used to be the tool Regini.exe from the Windows 2000 Resource Kit to do this, but it is no longer supported by Microsoft. Reg.exe can't do it either. Any ideas?
1
vote
1answer
101 views

IMAP server can't read (open) mails using fetchmail, procmail & dovecot

I'm trying to setup a mail server ! Everything seems to be ok (after some loooong days) but when I tried to read mail with IMAP server : Apr 18 17:38:48 sd-84941 dovecot: imap(dlp): Error: ...
1
vote
1answer
273 views

Installation problems with CouchDB 1.6 on Ubuntu 15.10

After using CouchDB 1.4 on Ubuntu 14.04, I recently tried to start fresh with 15.10 and the main couchdb package. It installed couchdb 1.6 which was a welcome change, but the ubuntu installation ...
1
vote
3answers
172 views

Windows File Permission common practices

As far as I understand and it was answered in this thread, that administrators still need an ACL to administer files even though they have the highest authority. On my system Administrators group is ...
1
vote
1answer
425 views

Start a remote scheduled task without administrator group

we are currently evaluating the possibility to start an already created scheduled task remotely. I already know that we can use the command: schtasks /run /s computer /tn taskname and it work fine. ...
1
vote
2answers
1k views

What are the minimal permissions for WMI access to processes CommandLine?

I have been trying to get a remote listing of running windows processes including their CommandLine/ExecutablePath attribute through WMI as a non-administrator domain user for a monitoring tool. I ...
1
vote
2answers
4k views

Nginx PHP-fpm permission

When i'm setting the user in nginx.conf to root root: user root root; then my website is working, but when i set it to nginx nginx i get error in the logs: connect() to ...
1
vote
3answers
361 views

nginx - linux permissions interesting issue

I'd like to get some answers or suggestions to my problem. So I'm getting a simple error: 2014/02/16 12:01:43 [error] 7384#0: *1 FastCGI sent in stderr: "Primary script unknown" while reading ...
1
vote
1answer
10k views

Samba private and public shares for windows

I am facing an issue with Samba shares setup for windows use. I have two shares - 1] public share, which is available for everyone in the network, 2] admin share, which is supposed to be password ...
1
vote
1answer
903 views

Windows Server 2003 permissions not working properly and I can't fix it

Well, sometimes things come along that give you humility. Gahh! I had an old Windows 2000 server running in a closet on a DSL line. It was doing a small amount of web and mail and ftp for a couple of ...
1
vote
1answer
3k views

Cannot find “IIS APPPOOL\{application pool name}” user account in Windows Server 2008

Normally when setting up IIS 7, I'm used to allowing permissions to user IIS APPPOOL\{application pool name} on the root folder of my web application(s). I also give permissions to IUSR (or the ...
1
vote
1answer
1k views

Managing Linux Directory Permissions & SFTP

Good morning; I have a RHEL 5.7 web server configured to allow SSH/SFTP only by specific groups. I'd like for content managers to upload content to their respective directories and have that content ...
1
vote
2answers
577 views

dkimproxy unable to read private key

I just found this error in my server logs May 17 14:55:07 marcus dkimproxy.out[1005]: signing error: Error: cannot read /etc/ssl/private/dkim_server/dkim_server.key: Permission denied dkimproxy ...
1
vote
1answer
1k views

Fixing Amazon EC2 Permissions

I accidentally change the permission to chmod -R 777 /var and now I cannot access the EC2 instance how do I fix this?
1
vote
2answers
8k views

Group policy startup script needs elevated priviledges

I have a script that I want to run at startup but that requires elevated priviledges. Is there a way of doing this with Group Policy? I tried adding it in as a startup script using GPO but it ...
1
vote
1answer
897 views

Best way to reset all security/ownership for NTFS?

How can I completely reset the security and ownership for a drive (ie. all subdirectories and files)? I'm recreating a large RAID array and I'd like to "start fresh" with the absolute default ...
1
vote
4answers
293 views

Can someone explain a bit about Unix folder permissions and safety?

Why would I change folder permissions to 755 or 777 for example? I read that it means read write and execute but what I want to know, can anyone steal php codes depending on these permissions? Thank ...
1
vote
1answer
167 views

Restrict subversion to only allow certain functions

I'm in a bit of a situation. We have our private subversion server that we use for development, but one of our government clients is requesting access to our commit logs so that they can get an ...
1
vote
1answer
1k views

Setting up SVN+SSH for multiple users through one local user

I need to make our SVN repository accessible through the firewall - but without creating a local user for each potential external user. Instead, I would like to set-up SVN+SSH to route all external ...