In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

6
votes
1answer
5k views

How can I remove my users from local admin rights with a GPO?

I have active directory 2003 and windows xp running on clients so I don't want any of my users to have any admin rights on their PCs and I have already gave them local admin rights So Without to go to ...
6
votes
1answer
2k views

Is there a command that produces a diff of the permissions of target files?

Just as it sounds, I'm trying to find out if there is a (standard) command that will produce a diff of the permissions between two files and/or directory trees. Ideally it would put out a patch file ...
6
votes
1answer
2k views

Permission denied when opening file as root with mode 777

I'm attempting to install and run syslog-ng but I'm blocked with the following error. Error opening configuration file; filename='/etc/syslog-ng/syslog-ng.conf', error='Permission denied (13)' I'm ...
6
votes
1answer
42 views

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
6
votes
1answer
950 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...
6
votes
1answer
583 views

OS X clients ignoring Windows print server permissions

I'm in the process of testing a Windows Server 2008 R2 print server for a mixed OS X/Windows environment. Any security permissions (AD groups) I set for the printers on the print server are not ...
5
votes
5answers
544 views

Prevent linux from being replaced [closed]

This is somewhat related to physical security breach. Consider a Linux server with all firewall and other security stuffs running in it. However, if someone gets physical access to the server, he ...
5
votes
7answers
5k views

security issue of Linux sudo command?

I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
5
votes
12answers
2k views

What are the best practices in deciding what to lock down and what to allow with corporate users? [closed]

How do you decide what is permissible to allow users control over? With a given feature or functionality (say, setting shares on a folder, attaching certain filetypes in email, installing USB devices) ...
5
votes
8answers
249 views

Should We Abolish User Access to rm?

Lately, I've been hearing system administrators and managers ask about solutions to keep people from accidentally removing their data. These are very smart and dedicated people asking for a solution ...
5
votes
5answers
15k views

I have administrative rights on Windows Server 2003, so why am I denied access to a folder?

A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told: D:\folder is not accessible. Access ...
5
votes
3answers
12k views

How to view who owns a file?

I know to change an owner you put chown user:group file but what if I want to see who owns a file? The issue I am having is I created a user at /var/www/new-user but when he uploads new files ...
5
votes
2answers
2k views

Change ownership or permissions on only directories or files, recursively

I'm trying to set permissions/ownership on either directories or files, recursively within a given directory, without changing the other. E.g. I have directory /web where I want to set all the ...
5
votes
3answers
4k views

Can Linux file permissions be fooled?

I came across this example today and I wondered how reliable Linux file permissions are for hiding information $ mkdir fooledYa $ mkdir fooledYa/ohReally $ chmod 0300 fooledYa/ $ cd fooledYa/ $ ls &...
5
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
5
votes
4answers
2k views

Clarify something about Linux directory permissions

I'm almost ashamed to admit that there is one thing I am still unsure about when it comes to file permissions. Let's say I have a directory with 750 permission (drwxr.x...). Then I create some ...
5
votes
10answers
4k views

How do you lock down workstations and still support legacy applications that require local administrator rights?

I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, ...
5
votes
4answers
22k views

NTFS Permissions for root share that houses Home Directories Windows Server 2008 R2

I am using the AD Profile Tab to Auto create Home Directories at \server\home so the permissions are automatically created. What should the permissions (NTFS) be for the actual folder that the home ...
5
votes
2answers
1k views

Active Directory Permissions: Delete vs Move

I want our help desk to be able to move user accounts but NOT delete them. Here is the summary of our current permissions set on the affected OU's (this DOES allow them to delete user accounts): ...
5
votes
3answers
10k views

How to set file/folder permissions using Rsync from Windows to Linux

I want to transfer lots of files/folders from Windows to Linux using Rsync. On linux server(destination), I want the file permission set to 644, and folder permission set to 755. If possible, I want ...
5
votes
1answer
12k views

How can I override group policy using a local administrator account?

I have local administrator access on my machine but somehow still can't change the screensaver setting. I believe it is being disabled by group policy somehow, is there a way to override this?
5
votes
2answers
8k views

file ownership for new files with administrator - why is it giving ownership to the group administrators?

I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain. I see that the folder has a ...
5
votes
4answers
13k views

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file ...
5
votes
3answers
5k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...
5
votes
6answers
319 views

Web Designer Permissions on a Production Web Server [closed]

Just started working with a small group of front-end web developers who all login to the dedicated WHM/Apache production server with root to modify client web sites. They claim they do not want to ...
5
votes
3answers
287 views

On Windows Vista, is there a way to allow an application to always run with elevated permissions?

Here is the scenario, I have an application that requires elevated permissions to run on my Windows Vista based HTPC, but I don't want to disable UAC because the computer is always connected to the ...
5
votes
3answers
1k views

Why can I access only the security tab on a server's printers?

Context: Win7 64-bit client, Windows Server 2003 I log into the server using MSTSC. The server is running Windows Server 2003, 32bit. I call up the list of Printers and Faxes from the Start menu. I ...
5
votes
2answers
11k views

How to give rights to one user for the restart of a service

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?
5
votes
2answers
9k views

UNIX - How to give user rights over another user and so I don't need to sudo or type password?

I have 2 users in question • git user - used for gitosis - so it's a No password user and it can be accessed only through root... • user user - where my files reside so what I would like to do is ...
5
votes
6answers
20k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
5
votes
1answer
722 views

Permissions are a mess- advice for cleanup?

Walking into a new organization, permissions are a mess. Over time, many many users have been given access to folders and files explicitely as needed instead of having established group policies for ...
5
votes
3answers
7k views

How to allow members of a group to change file permissions on linux

I need to allow members of the group 'ftpusers' to be able to change permissions on all objects inside a certain directory. I was looking into how to do it but all I have found is how to do it on BSD: ...
5
votes
2answers
3k views

Why would chmod give “No such file or directory” when running recursively?

I can change the permissions of the file directly: # chmod --changes --recursive ug+rwX /var/www/shared/tmp/cache/assets/BA0/280/sprockets%2F286302903364106648b609d708884f78 and I can also ...
5
votes
2answers
6k views

Share screen session with users in the same group (Linux)

I can create a detached screen session using the following command: [user1@host-pc ~]$ screen -d -m -S sname program ...and resume to it using this command: [user1@host-pc ~]$ screen -r sname Is ...
5
votes
1answer
7k views

Permissions to create an spn

According to some of the documentation I've read the service account for SQL server will create an SPN when the database engine starts up, allowing for kerberos authentication. I haven't been able to ...
5
votes
1answer
15k views

MYSQL remote read only access, how do I set it up?

I've seen stuff on how to enable remote access, but never how to restrict it so that users cannot make any changes. I tried doing this: mysql> create user 'dude'@'boingoboingo.local' IDENTIFIED BY ...
5
votes
3answers
58k views

Using “Run as…” as limited user to modify network connection settings? [closed]

I'm running in a non-admin account on my development workstation, using "Run as..." for all things that need administrator privileges. Thankfully under XP even the control panel applets allow that. ...
5
votes
2answers
62 views

Reliably copy files on Windows, whatever the ACLs [closed]

I often need to do a quick backup of some user data. And often I have an error message stating the ACLs do not allow to copy the whole data. So I have to modify the source ACLs, which is not a desired ...
5
votes
1answer
101 views

Microsoft Exchange Server Permission Insight

I was just assigned management of our Exchange Servers. The person who installed and configured our Exchange 2010 Servers did not set up permissions correctly. I noticed that anyone within the ...
5
votes
1answer
11k views

What is the best way to fix NTFS file permissions to inherit parent?

When XP clients move files on the same volume, the permissions are moved with it. With Windows 7 clients and up, when a file is moved, the permissions are inherited. Unfortunately, we still have a ...
5
votes
1answer
1k views

mysql grant option

I have a mysql user that currently has the following privileges: mysql> show grants; +--...--+ | Grants for debian sys-maint@localhost +--...--+ | GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, ...
5
votes
5answers
6k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open .git/...
5
votes
2answers
3k views

getting a 403 error

Constantly getting a 403 error. You don't have permission to access /index.html on this server. log file : (13)Permission denied: access to /index.html denied (13)Permission denied: access to /...
5
votes
2answers
396 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
5
votes
3answers
8k views

Apache “No Permission” - 403 forbidden

I've accidentally performed a wrong chown update this morning and now my /var/www permissions are all wrong. I'm unable to access anything anymore, apache will always say I do not have permission to ...
5
votes
5answers
2k views

Write-only access that can see the files present?

In our schools, we have network shares for different classes containing "Hand In, Hand Out" folders. Students put their work in the Hand In folder, and teachers put assignments in the Hand Out folder....
5
votes
4answers
24k views

Administrator File Modification Privilege

Windows Server 2008 apparently allows an application to somehow configure the folder so that any changes made within the folder require administrator level access. I login with an account that has ...
5
votes
2answers
1k views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
5
votes
3answers
10k views

Cron: Permission denied on everything

As a regular user I can't edit my cron settings. I get a "permission denied" for everything: listing the cron commands or editing them. Example: cron -l cron: can't open or create /var/run/crond.pid:...
5
votes
2answers
3k views

Samba, Apache and SVN. Getting the permissions right

I have two machines I work on: Windows Client (Development Machine) Linux Web Server (Ubuntu) On the Linux server I have installed Apache, Samba and SVN. I've created a samba share that maps to ...