In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

4
votes
3answers
11k views

NTFS Permissions Auditing with PowerShell

I am working on a project where I need to be able to audit various users and user group permissions on a NTFS formatted Windows file server. I would like to use PowerShell and have it recursively ...
4
votes
2answers
2k views

Subversion and mod_dav_svn: Why make www-data the owner of the files instead of root?

I've set up a dedicated Subversion server with Apache and mod_dav_svn on Ubuntu 9.10 Server, and I've got everything working fine at this point. However, I noticed that when it comes to assigning the ...
4
votes
2answers
2k views

‘noexec’ option on NTFS under Windows?

Is there equivalent filesystem option on Windows like 'noexec' mount option on Linux? Is it the same if I set "Read" permission, but unset "Read & Execute" permisson on root directory (whole ...
4
votes
4answers
20k views

How might I grant access to everyone's calendar in Exchange 2007?

We're considering changing our users' Outlook calendar permissions for all users so that everyone has "Reviewer" access by default. Since our users primarily use their calendars for business (and can ...
4
votes
4answers
4k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open ...
4
votes
1answer
873 views

How to grant permissions to Network Service to write in a remote location

I need to grant permissions to the Network Service account to write on a different machine on the same network. Can you tell me which permissions I should add? Thanks! EDIT From ...
4
votes
2answers
277 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
1answer
10k views

MYSQL remote read only access, how do I set it up?

I've seen stuff on how to enable remote access, but never how to restrict it so that users cannot make any changes. I tried doing this: mysql> create user 'dude'@'boingoboingo.local' IDENTIFIED BY ...
4
votes
1answer
2k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim ...
4
votes
5answers
9k views

Add group rwx permissions to a folder

I have a folder named docs, how do I add rwx permissions for group devs to docs? I tried: chmod -R g+rwx docs but I don't know where to specify that it's the devs group I want to grant permissions ...
4
votes
2answers
4k views

How to prevent ssh git push to set file ownership?

I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the ...
4
votes
2answers
3k views

Different NTFS Permission on subfolders

I have on our server a folder for each client. Inside that folder there are subfolders for each project that belongs to that client. My problem is that different resources in the company handle the ...
4
votes
1answer
172 views

Tool to see nested permissions?

Here's the situation. Often I need to tell how a user is getting access to a specific folder. I can see in "Effective permissions" that they have read/write/etc, but because of nested groups I can't ...
4
votes
1answer
1k views

Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions

I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
4
votes
2answers
4k views

Share screen session with users in the same group (Linux)

I can create a detached screen session using the following command: [user1@host-pc ~]$ screen -d -m -S sname program ...and resume to it using this command: [user1@host-pc ~]$ screen -r sname Is ...
4
votes
2answers
1k views

Vista Failure Auditing

I need to meet government security requirements in order to ship my product. Here is specific requirement I am trying to meet: Group ID (Vulid): V-1080 Group Title: File Auditing ...
4
votes
3answers
133 views

How to forbid drag'n drop for a Windows XP folder?

Some of users here sometimes mistakenly drag'n drop a folder. Is it possible to forbid them to move and rename a folder? They are all using Windows XP. The folder is on the network. They should be ...
4
votes
2answers
655 views

Setting a permission for any future file created in this directory

Hi can I make in linux any future file created in some directory, writable. Thank you gidi
4
votes
1answer
734 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
4
votes
3answers
94 views

What extra permission settings were added in Windows Server 2003 over Windows Server 2000?

We have a domain controller currently running Windows Server 2000, and we're in the process of upgrading some of our workstations to Windows 7. The problem is that users are getting access denied ...
4
votes
3answers
237 views

Permissions for shipping SQL Server 2005 transaction logs

I'm trying to ship transaction logs from Server A to Server B. I keep getting permission denied errors when the agent tries to run because it isn't using the right credentials to connect to the backup ...
4
votes
2answers
690 views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
4
votes
3answers
2k views

How do I configure active directory when Sql Server 2012 is using a Virtual Account?

I'm getting the following event log entry from Sql Server 2012: SQL Server Scheduled Job 'Replication agents checkup' - Status: Failed - Invoked on: 2012-08-04 10:00:00 - Message: The job failed. ...
4
votes
2answers
263 views

Workaround for mounting a filesystem to a local directory without elevated privileges on Linux

I've got an ext3 filesystem sitting in a file, and I'd like to mount it to a local directory without sudo or any elevated permissions. Why? I'm creating a small filesystem for automated testing ...
4
votes
2answers
3k views

RSync over SSH - permission denied even though the user is in the root group

I have a need to copy files between servers through the web. I'm using RSYNC over ssh to do so. The problem is, I need to be able to transfer files, no matter where the files is. I created a user ...
4
votes
1answer
5k views

“debug1: read_passphrase: can't open /dev/tty: No such device or address” when trying to connect through SSH

I am trying to connect to my server using ssh user@server.com -vv I get debug1: read_passphrase: can't open /dev/tty: No such device or address error or just Permission denied, please try ...
4
votes
1answer
3k views

How to make all new files in the directory be owned by the particular user?

I want all the files in /var/www directory be owned by nginx.devel. I have performed chmod once and update these files using rsync. But if I create a new file and then rsync it, it will be owned by ...
4
votes
2answers
815 views

crontab listing or editing results in fopen: permission denied

Recently, a job configured to run from a user's crontab stopped executing. When attempting to list or edit the crontab for the user, the result is: user@host:~$ crontab -l crontabs/user/: fopen: ...
4
votes
2answers
103 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
4
votes
1answer
248 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
4
votes
1answer
377 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
4
votes
1answer
2k views

Why can't I copy .zip files from a server to a server in a different domain?

At work, we're using a Windows Server 2008 R2 VM as our build server. At the end of the build process for any of our projects, we copy the packaged deployment files to a folder on the server where ...
4
votes
2answers
1k views

MS SQL access to restored database without sysadmin role

I have databases from different projects on one server. I can't give all developers administrative (sysadmin) access to the databases. They have to have the permissions needed to create and restore ...
4
votes
5answers
5k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
4answers
684 views

Apache LAMP permisson issues on Ubuntu server

I have been trawling the internet for a few days now and think I've tried almost everything to get some virtual hosts set up on my Ubuntu server but everything short of chmod 777 on the webroot fails. ...
4
votes
2answers
3k views

Samba Permissions - I'm going to throw it!

I'm attempting to set up a samba share on my Ubuntu 8.04 LTS box, to be consumed by my mac and windows clients. I've created a 'samba' group and added my linux users to them, gave them samba ...
4
votes
3answers
7k views

Proper setup of user permissions for OpenSSH on Windows?

I am trying to setup OpenSSH on Windows to provide SFTP sites. I am running into some problems with user security settings. Here are the basic steps I've gone through to create a user: Create a ...
4
votes
1answer
54 views

What is this user name for and how did it get created?

When I created a website named Portal on my IIS 7.5 on the website permissions->security I got this user. What is its purpose? From what I have read the ApplicationPool runs under NetworkService ...
4
votes
1answer
764 views

Running a service with a user from a different domain not working

I've been stuck on this for a while, not sure what permission I'm missing. I've got domain A and domain B, A trusts B, but B does not trust A. I'm trying to run a service in domain A with a user ...
4
votes
2answers
738 views

setfacl equivalent to chmod for setting/unsetting individual flag

Using setfacl command line arguments, is there a way to set/unset a single flag as the following command will do ? chmod g+x FILE Please note that: setfacl g::x FILE setfacl g::--x FILE are ...
4
votes
1answer
2k views

Share Point ACL on OSX Lion Server - Posix group always takes over ACLs

Trying to configure a share point on a Lion Server machine. The directory is created by the local server admin (serveradmin) and has rwxr-x--- given to it. The serveradmin user belongs to the local ...
4
votes
1answer
873 views

Default file permissions when copying from Windows share to OS X

I have an issue that I haven't been able to find an answer for. I have a handful of Mac designers here that started using a program called Articulate to generate flash objects to embed on our ...
4
votes
2answers
3k views

Linux acls uses wrong gid for domain groups, but numerical gids ok

Please see edit below, as it turns out that the problem is with uid/gid to sid mapping and shows a workaround that will help understand the problem more quickly. We have a Ubuntu 11.04 server ...
4
votes
1answer
3k views

Group Policy Client failed the logon - Access Denied?

Background We have a Server 2008 R2/Win7 domain. We have teachers and students using Windows 7 workstations, deployed via SCCM. Students all refer to a shared profile (\\dfsroot\\profiles\student, ...
4
votes
2answers
1k views

How can I change the umask for a user when he logs on to an alternate group?

I want the umask to be more permissive for users when they switch to a non-default group. Just to demonstrate what I mean: $ id uid=500(beamin) gid=500(beamin) groups=10(wheel) $ umask 0022 $ sg ...
4
votes
5answers
611 views

Ideal permissions scheme for multiple Apache/PHP sites

I'm hosting multiple sites from one server where each site has it's own user and www directory in their home dir. Currently our web server runs as user nobody(99). We're noticing that to run several ...
4
votes
4answers
354 views

Starting/Stopping Services on a remote PC

I need to be able to remotely start and stop services on another windows machine in the domain. If I open up the "Service Manager" I can connect to the remote machine and view all its services ...
4
votes
1answer
239 views

SQL 2005 Security - Users: What are they used for? (and other various questions)

I am not a DBA and so dont really know anything about SQL 2005 security settings, etc. I am attempting to set up an empty copy of our database by generating the full database from SQL Management ...
4
votes
2answers
2k views

Samba Public and “Dropbox” folder

I want to create a special Group Directory structure for my Users. /home/groupA <-- home folder for groupA where every user of groupA can create/edit/delete files /home/groupA/Public <-- ...
4
votes
0answers
471 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...