In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

5
votes
3answers
4k views

Can Linux file permissions be fooled?

I came across this example today and I wondered how reliable Linux file permissions are for hiding information $ mkdir fooledYa $ mkdir fooledYa/ohReally $ chmod 0300 fooledYa/ $ cd fooledYa/ $ ls ...
5
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
5
votes
4answers
2k views

Clarify something about Linux directory permissions

I'm almost ashamed to admit that there is one thing I am still unsure about when it comes to file permissions. Let's say I have a directory with 750 permission (drwxr.x...). Then I create some ...
5
votes
10answers
3k views

How do you lock down workstations and still support legacy applications that require local administrator rights?

I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, ...
5
votes
4answers
18k views

NTFS Permissions for root share that houses Home Directories Windows Server 2008 R2

I am using the AD Profile Tab to Auto create Home Directories at \server\home so the permissions are automatically created. What should the permissions (NTFS) be for the actual folder that the home ...
5
votes
3answers
20k views

chown: changing ownership of `.': Invalid argument

I'm trying to install some new files on our new server while our sysadmin is in holidays: Here is my df # df -h Filesystem Size Used Avail Use% Mounted on /dev/sdb3 273G ...
5
votes
4answers
17k views

Permission denied but group permissions look good on redhat

I have a user ftpadmin: -bash-3.2$ id ftpadmin uid=10001(ftpadmin) gid=2525(fsg) groups=2525(fsg),10005(git) The important group to note is "git" Then I have my git repository: ls -al drwxrwxr-x ...
5
votes
2answers
898 views

Active Directory Permissions: Delete vs Move

I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts): ...
5
votes
3answers
8k views

Why does FIND on Windows 7 give an “Access Denied” error?

I have an administrator account on a Windows 7 x64 machine. It is not THE administrator account, the account is simply a member of the administrators group. The install is default. When the user ...
5
votes
1answer
11k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
5
votes
2answers
7k views

file ownership for new files with administrator - why is it giving ownership to the group administrators?

I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain. I see that the folder has a ...
5
votes
3answers
7k views

How to set file/folder permissions using Rsync from Windows to Linux

I want to transfer lots of files/folders from Windows to Linux using Rsync. On linux server(destination), I want the file permission set to 644, and folder permission set to 755. If possible, I want ...
5
votes
6answers
318 views

Web Designer Permissions on a Production Web Server [closed]

Just started working with a small group of front-end web developers who all login to the dedicated WHM/Apache production server with root to modify client web sites. They claim they do not want to ...
5
votes
3answers
10k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
5
votes
3answers
280 views

On Windows Vista, is there a way to allow an application to always run with elevated permissions?

Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
5
votes
3answers
1k views

Why can I access only the security tab on a server's printers?

Context: Win7 64-bit client, Windows Server 2003 I log into the server using MSTSC. The server is running Windows Server 2003, 32bit. I call up the list of Printers and Faxes from the Start menu. I ...
5
votes
2answers
10k views

How to give rights to one user for the restart of a service

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
5
votes
6answers
19k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
5
votes
1answer
611 views

Permissions are a mess- advice for cleanup?

Walking into a new organization, permissions are a mess. Over time, many many users have been given access to folders and files explicitely as needed instead of having established group policies for ...
5
votes
2answers
9k views

UNIX - How to give user rights over another user and so I don't need to sudo or type password?

I have 2 users in question • git user - used for gitosis - so it's a No password user and it can be accessed only through root... • user user - where my files reside so what I would like to do is ...
5
votes
2answers
6k views

Share screen session with users in the same group (Linux)

I can create a detached screen session using the following command: [user1@host-pc ~]$ screen -d -m -S sname program ...and resume to it using this command: [user1@host-pc ~]$ screen -r sname Is ...
5
votes
1answer
5k views

Permissions to create an spn

According to some of the documentation I've read the service account for SQL server will create an SPN when the database engine starts up, allowing for kerberos authentication. I haven't been able to ...
5
votes
1answer
14k views

MYSQL remote read only access, how do I set it up?

I've seen stuff on how to enable remote access, but never how to restrict it so that users cannot make any changes. I tried doing this: mysql> create user 'dude'@'boingoboingo.local' IDENTIFIED BY ...
5
votes
3answers
56k views

Using “Run as…” as limited user to modify network connection settings? [closed]

I'm running in a non-admin account on my development workstation, using "Run as..." for all things that need administrator privileges. Thankfully under XP even the control panel applets allow that. ...
5
votes
1answer
97 views

Microsoft Exchange Server Permission Insight

I was just assigned management of our Exchange Servers. The person who installed and configured our Exchange 2010 Servers did not set up permissions correctly. I noticed that anyone within the ...
5
votes
2answers
3k views

Why would chmod give “No such file or directory” when running recursively?

I can change the permissions of the file directly: # chmod --changes --recursive ug+rwX /var/www/shared/tmp/cache/assets/BA0/280/sprockets%2F286302903364106648b609d708884f78 and I can also ...
5
votes
1answer
9k views

What is the best way to fix NTFS file permissions to inherit parent?

When XP clients move files on the same volume, the permissions are moved with it. With Windows 7 clients and up, when a file is moved, the permissions are inherited. Unfortunately, we still have a ...
5
votes
1answer
986 views

mysql grant option

I have a mysql user that currently has the following privileges: mysql> show grants; +--...--+ | Grants for debian sys-maint@localhost +--...--+ | GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, ...
5
votes
4answers
5k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open ...
5
votes
2answers
3k views

getting a 403 error

Constantly getting a 403 error. You don't have permission to access /index.html on this server. log file : (13)Permission denied: access to /index.html denied (13)Permission denied: access to ...
5
votes
2answers
347 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
5
votes
3answers
7k views

Apache “No Permission” - 403 forbidden

I've accidentally performed a wrong chown update this morning and now my /var/www permissions are all wrong. I'm unable to access anything anymore, apache will always say I do not have permission to ...
5
votes
3answers
11k views

Is it possible to use Group Policy to grant the permission to manage Windows services?

Is it possible to use Group Policy to grant the permission to manage Windows services? I would really like to know if this is even possible, and if so, where do you recommend I look for more ...
5
votes
5answers
2k views

Write-only access that can see the files present?

In our schools, we have network shares for different classes containing "Hand In, Hand Out" folders. Students put their work in the Hand In folder, and teachers put assignments in the Hand Out ...
5
votes
4answers
22k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
5
votes
2answers
1k views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
5
votes
3answers
9k views

Cron: Permission denied on everything

As a regular user I can't edit my cron settings. I get a "permission denied" for everything: listing the cron commands or editing them. Example: cron -l cron: can't open or create ...
5
votes
2answers
3k views

Samba, Apache and SVN. Getting the permissions right

I have two machines I work on: Windows Client (Development Machine) Linux Web Server (Ubuntu) On the Linux server I have installed Apache, Samba and SVN. I've created a samba share that maps to ...
5
votes
5answers
172 views

Starting a mysql server in my ${HOME}?

I'm not root on my server (linux) and this server doesn't currently run a mysql server as a daemon. Can I start a mysql daemon that would only work for my account and where the data/files would be ...
5
votes
3answers
2k views

Delegating account unlock rights in AD

I'm trying to delegate the rights to unlock user accounts in our Active Directory domain. This should be easy, and I've done it before... but every time the user tries to unlock an account (using the ...
5
votes
2answers
3k views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
5
votes
3answers
660 views

Delegate log off privilege?

Is it possible to delegate the right to log other users off? I'd like to give users the ability to log another user off of a computer, but I'm not willing to make everyone administrators to do so. We ...
5
votes
1answer
710 views

Windows domain share permissions basics

Consider following share rights: Security \\dev\profiles\ rw – Administrators Security \\dev\profiles\bambus02 inherited AND rw – bambus02 Sharing \\dev\profiles rw – Everyone as "bambus02", my ...
5
votes
5answers
12k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
5
votes
4answers
9k views

How to deny execute permissions on a share/folder in Windows?

I am archiving files into self-extracting .exe files. I want the user to have to copy the .exe to their machine in order to execute (extract) the files. So I want to deny only execute permission. They ...
5
votes
3answers
270 views

What is preventing me from piping from a '600' file into mail within launchd?

In OSX 10.6 I'm running logcheck.sh via. launchd using this plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" ...
5
votes
10answers
11k views

IIS6: How to troubleshoot a 404 error in an ASP.NET application?

I have an ASP.NET application on a Windows Server 2003/IIS6 that refuses to run for some reason (it's the Xerox Centre, if that info helps). It has been working flawlessly before though on this ...
5
votes
1answer
474 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
5
votes
2answers
8k views

windows server 2012 remote desktop - Send messages between standard users

Does anyone know the policy, or registry change, etc. for allowing messages (on the same server) between standard users... an elevated cmd prompt or task manager works of course... but need it to ...
5
votes
2answers
789 views

What is the proper way to set up the Apache document root in terms of privileges?

I have just installed Ubuntu 9.10 server edition on my machine and I wish to run my own personal local server with other users in the same LAN. First, I was wondering what folder directory structure ...