In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

0
votes
0answers
25 views

samba permisions when copying files to file share

Maintainign a ubuntu server for a client where they use several file shares through smb. Fileshares have permisions to user groups and are set to 0770 Lately I get a lot of complaints from users ...
0
votes
0answers
100 views

Roaming Profile where user NOT owner, but no errors seen

Here I am complaining that I am NOT seeing errors. This might seems strange, but the expected behaviour, as I understand it, is that I should see errors under this configuration. We have had roaming ...
2
votes
1answer
136 views

Office Registry Settings for Office 2013 for use with ADRMS

We had ADRMS running with Office 2010 on Windows 7, between a few divisions using Trusted Publishing Domains (TPD), this made available by using a few registry changes for use in Office 2010 ...
1
vote
0answers
290 views

Unable to use rsnapshot to sync non-owned files but able to do it with plain rsync command

I am trying to use rsnapshot to sync remote file to my own computer. However, I have some trouble when I need to access files which are not owned by user who is SSH-ing to the remote machine. My ...
5
votes
1answer
63 views

Microsoft Exchange Server Permission Insight

I was just assigned management of our Exchange Servers. The person who installed and configured our Exchange 2010 Servers did not set up permissions correctly. I noticed that anyone within the ...
2
votes
1answer
1k views

Windows 7: Having Underprivileged User Install and Alter Fonts

I've run into this huge issue with a graphic designer. They want to be able to install fonts they have downloaded. This user is a non-admin user on the local machine and a non-admin user on our ...
1
vote
0answers
143 views

What is a safe alternative to wildcards in /etc/sudoers?

In the /etc/sudoers file on my Red Hat server, I have this line: %webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/* This is clearly a bad idea, since someone could do something like this: sudo ...
0
votes
3answers
66 views

Delete file as different user under PHP

I'm running PHP as user www-data and Nginx is running as user nginx. I need to delete files in /var/cache/nginx/, which is owned by user nginx and I want to do it using PHP. Is there a way to allow ...
0
votes
0answers
256 views

nginx and php-fpm permission

I have a problem with nginx / php-fpm permissions. I run a website in /var/www/clients/client1/web1/web, the owner:group of that folder and subfolders is web1:client1. When I try to create or upload ...
2
votes
1answer
80 views

Set containing directory permissions using setfacl?

I have a file e.g script.php in the following folder structure style /home/site/admin/script.php I have used setfacl to allow a new user that logs in remotely permission to include that file in ...
1
vote
1answer
42 views

Which match takes precedence when exporting an NFS share?

Say you're exporting an NFS share using IP addresses and netmasks to give different machines different permissions: [/etc/exports] /media/shared 192.168.0.64/26(rw,[...]) 192.168.0.0/24(ro,[...]) ...
1
vote
0answers
213 views

File permission problems with Apache, FastCGI, and Prestashop

I am running a Prestashop installation on CentOS 6.5 and Apache 2.2.15. A while back I updated Apache and lost the ability to upload product images via Prestashop backoffice along with other problems, ...
1
vote
1answer
73 views

Apache can't reading from documentroot with permissions for www-data

My OS is Linux Mint 17. My goal is allow reading of /mnt/wwwdata for root and apache only. I trying to setup apache document root in directory /mnt/wwwdata, with rights 0770 for group wwwadmins, ...
1
vote
1answer
186 views

Copy file from Windows host to Linux host via Rsync, then set permissions

So I have a Windows SFTP server (SFTPSERVER), which receives files (duh). I then need to push those files to a Linux server (AD authenticated to my domain) elsewhere in my organzation. So that bit I ...
2
votes
0answers
21 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
0
votes
1answer
226 views

nginx server, multiple users editing their own files via SFTP

I'd like to have a Debian server set up so that different users have their own domains that only they can edit, e.g.: /home/ + /bob/www/ + oldsocks.com/ + nosepickers.org/ + /joe/www/ + ...
-1
votes
1answer
25 views

Messed up permissions of mail folders

i just messed up the permissions of all /var/spool/mail folder on a 250 user system. I have the homefolders with the correct permissions and the same name. Is there an easy way to make the permissions ...
0
votes
0answers
26 views

Failed to create the new object, access is denied. Server2012

I am very new to server administration, and am having quite a headache on this one.. I am logged in as the Domain Administrator account. I wanted to configure DAC and am having problems with Claims. ...
0
votes
1answer
23 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
0
votes
3answers
2k views

root + crontab : permission denied [duplicate]

I'm using Debian 6, all patched up, but when I try to access crontab as root, I just get a permission denied: root@server:~# crontab -e -bash: /usr/bin/crontab: Permission denied Please note this ...
2
votes
1answer
187 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...
4
votes
1answer
77 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 ...
1
vote
0answers
48 views

Granting user enough privileges to run ifconfig on IllumOS (OmniOS)

I sense this should be a very simple question, but somehow I cannot find a solution. I have a non-root user and I would like to grant this user enough permissions or privileges, so he can run ...
14
votes
2answers
1k views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...
0
votes
1answer
286 views

Windows cant open mac shared files unless read only

I recently setup a mac server (Mavericks 10.9.5, Server 3.2.1) in our office environment, mostly mac but there are two windows pcs. The windows 8 machine can connect and open files/folders without ...
0
votes
1answer
22 views

Setting COM permissions

Our little COM library is getting the dreaded 80004005 error on a customer's new computer. I recall this has to do with COM permissions, but for the life of me I can't find these any more on this ...
0
votes
1answer
66 views

MySQL user:pass in roundcube php config

Is it considered bad practice to have a MySQL query with user:pass as plaintext? I'm doing this right now (in nginx/roundcube to modify my dovecot passwords) but it seems strange because if I had ...
1
vote
2answers
571 views

Exchange 2013 Calendar Issues

I have an ongoing Exchange 2013 problem with some users not being able to add/edit Calendar entries into the Calendars of other users. I'm hoping for a clue as to why this may be happening. We have ...
1
vote
2answers
122 views

Hourly Clamscan cron script failes at reading file list

I've this piece of code located in /etc/cron.hourly/hourlyclamscan. #!/usr/bin/bash # Create Hourly Cron Job With Clamscan # Directories to scan SCAN_DIR=/home/transmission/Downloads # Temporary ...
0
votes
0answers
69 views

Fix Account issues after removing DC from server with IIS?

We recently upgraded our single-domain Windows network by adding two new servers. We promoted them both to domain controllers and removed the domain controller from our webserver (which was set up ...
0
votes
1answer
287 views

dovecot 2.1 new imap folder permissions

I am migrating an old mail (postfix/dovecot) server to a new one. Everything works much as expected. I have a small obstacle though. I use mbox format and the setup is pretty much simple. Suppose a ...
0
votes
0answers
50 views

how to run a web app: users/groups to use for each component?

How do you organize your users/groups to run the different components of your web app? Any best practices? The answer of this question (What permissions should my website files/folders have on a ...
1
vote
1answer
2k views

CentOS 7, SELinux, PHP, Apache: How to set default permissions to new or updated files in an directory?

Server info: CentOS Linux release 7.0.1406 (Core) PHP 5.4.16 (cli) (built: Sep 30 2014 09:44:39) SELinux enforcing Apache/2.4.6 (CentOS) My PHP-Script needs to read from a home directory ...
0
votes
0answers
152 views

How to assign different permissions to folders through WebDAV by NGINX

I can't set up Nginx with WebDAV as I need to. The task is: There is a folder '/srv/root' with two subfolders - 'folder1' and 'folder2' and 3 users - 'admin', 'user1' and 'user2'. I want 'admin' to ...
0
votes
1answer
156 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
2answers
215 views

Give Apache Permission to Serve Files Outside of /var/www

I have my apache server and its specific files in /var/www and I have a bunch of group documents that I want to serve out in another directory /company/shared_files. I wrote and alias and it seems ...
-1
votes
1answer
331 views

How to pass the SSH_AUTH_SOCK through sudo (Permission denied (publickey).) [duplicate]

I have a Ubuntu server with the users: ubuntu and user I connect to each of the users using ssh -A (to pass my local machine keys to SSH). From any of the users I can connect to the SSH server of ...
0
votes
2answers
35 views

Disallowing interactive login for specific mysql users

I want to create some mysql users for different web sites but disallow interactive connections for them. If a evil-user get the mysql login credentials of a website, creating a conexion from ...
0
votes
1answer
31 views

Git on Amazon Server

I have git running on an Amazon server and up til now I have been the only one to use the server. I use my Amazon ssh key to connect and am then connected as root on the server without the need for ...
-1
votes
1answer
93 views

windows 7 cant open files from osx mavericks server

I have recently setup OSX Server (on Mavericks) with an external harddrive. I have setup users and groups and created two sharepoints (public (on the internal drive), work (on the external)). Last ...
0
votes
1answer
111 views

Wrong owner/group with SSHFS

I mounted a remote with SSHFS and everything works as expected, except the owner/group information. No matter what file's owner/group I check, it's always root:root. I'm mounting the remote like this ...
0
votes
1answer
119 views

rsync backup remote server maintaining groups and owner

This might seem like a problem that should have been covered millions of times but I am running into issues that after days of scouring the net, I still can fix. I have a remote server that I want to ...
2
votes
1answer
668 views

Top level folders show permissions inherited from Parent Object - who's the Parent?

Looking at a Windows 2012 R2 server that has D:\Users, D:\Admin, D:\Repository and a few more like that that are shared. When looking at security, they show inheriting permissions from Parent Object. ...
0
votes
1answer
47 views

NFS permissions on a directory

I feel stupid not knowing this, but alas, I need to ask. I have a few directories being automounted via NFS on my CentOS boxes. Source is a Dell NAS or Openfiler (which we are working on migrating ...
1
vote
2answers
3k views

Permission denied (public key) ssh ec2 instance mac [closed]

Update2: $ ls -ld ~/.ssh drwx------ 8 user staff 272 2 Oct 17:51 /Users/user/.ssh $ ls -la ~/.ssh/config/file.pem -r--------@ 1 user staff 1692 2 Oct 17:11 /Users/user/.ssh/config/file.pem $ ls ...
0
votes
1answer
356 views

Using sudo in a Git hook to set permissions after deploy

I run a few sites on Ubuntu and I'm setting up a new deploy worflow as follows (the example uses the staging environment): On my dev machine, I do git push staging which pushes to a bare repository ...
2
votes
1answer
119 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
2answers
38 views

Allow mysql user to be used just by specified user

Currently any system user can run: systemuser$ mysql -u mysqluser -p (assuming he knows the password). Is there a way to deny mysql (cli) to use particular mysql user? eg. systemuser$ mysql ...
0
votes
1answer
64 views

Password less mysql access to specified user/script only

In addition to this question: Performing root mysql operations in bash scripts I'd like to ask how to limit/allow this action (performing root administrative actions): mysql --local-path=mypath -e ...
1
vote
2answers
39 views

Access to logs for not root/sudo user

What should I choose to allow staff access to logs on server. For example if I have user webmaster which should have access to /var/log/{mysql,nginx, etc...}, how can I make it? Maybe add group ...