In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

7
votes
0answers
274 views

Check that a given user has a given privilege

Given a pair of a user and a privilege I need to determine if a user has the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
4
votes
0answers
444 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
3
votes
0answers
39 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
3
votes
0answers
1k views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
3
votes
0answers
6k views

iSCSI issue; “the media is write protected”

i've got some serious issues with w2k8 r2 standard and iSCSI controller. i'm running dell server, connected via ethernet to synergy NAS, which is handling LUN via iSCSI. i'm using ms iSCSI initiator ...
2
votes
0answers
169 views

I removed all permissions on C:\ Server 2012 R2 Core

Really stupid move, I know this. I was granting permissions to one of our users on the C: directory of on of our servercore machines. I used icacls /grant :r and removed all the permissions to the ...
2
votes
0answers
265 views

WMI computersystem get username returns null

I'm having an issue with the below WMI query running under a non-admin service account against windows 7 PCs: wmic /node:x.x.x.x computersystem get username where x.x.x.x is the IP address of the ...
2
votes
0answers
252 views

NFS Write Permissions — ls -l shows I have it; I actually don't

I have an NFS server serving several clients. Permissions work fine with all clients except one. The client mounts the nfs share fine, with permissions all correctly placed to the right users. ...
2
votes
0answers
148 views

Permission for creating an event source

I have a WCF logging service that can write to the event log. The only problem is that the event source it writes to has to already exist and it cannot create it because the app pool the service is ...
2
votes
0answers
375 views

Roaming Profile where user NOT owner, but no errors seen

Here I am complaining that I am NOT seeing errors. This might seems strange, but the expected behaviour, as I understand it, is that I should see errors under this configuration. We have had roaming ...
2
votes
0answers
208 views

MySQL permission errors

It seems that on a Ubuntu 14.04 machine the user mysql cannot access anything. It is not writing logs nor reading files. Witness: - bruno():mysql$ cat /etc/passwd | grep mysql mysql:x:116:127:MySQL ...
2
votes
0answers
14 views

Give group of users install privilages in R but not affect root install?

So we have a few users who use a number of servers for various computations. They constantly ask us to install packages from bioconductor and cran for R. It's a real bother and truthfully they can ...
2
votes
0answers
144 views

Creating an Openstack user with only reboot permissions

What is the best approach for setting up an Openstack user that is limited to only rebooting servers using the Web API. The user needs to be able to access servers under different tenants, by using ...
2
votes
0answers
494 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
0answers
172 views

What permissions are needed on Mailbox database to call FindAppointments for all mailboxes?

I have a small application that retrieves all appointments from Exchange 2010 and puts them in a timesheet management app. The code to retrieve the appointments is as follows (it uses Exchange Web ...
2
votes
0answers
431 views

FUSE mounted Google Drive (via google-drive-ocamlfuse) for Wordpress and permission issues

My objective is to use Google Drive to store media files for a Wordpress multisite using Fuse, and so far I am able to mount Google Drive with google-drive-ocamlfuse as root. I can mount the Google ...
2
votes
0answers
104 views

Windows Server 2012 Shares vs. Windows Explorer Sharing

When I use the server manager in WS2012 and create a new share, point it at a folder and give everybody permission to read, it works very strangely: From a client computer, I can access the server in ...
2
votes
0answers
289 views

samba treat user as other or ignores group permissions

I have a server running with Ubuntu 12.10 and several Clients running Windows 7. I use Samba as domain controller. Everything works fine except the shared folder. I made a shared folder and configured ...
2
votes
0answers
231 views

Deny Delete Windows SMB fileshare - Mac OS X client

I'm struggling with this one. We have a folder within a shared drive that a certain group (group1) of users that can read/write and delete their own files and folders. However there is one account in ...
2
votes
0answers
363 views

Trac permission denied for SVN repo

I'm running Apache2,SVN & Trac on OpenSUSE. SVN works like a charm. I've initialized trac environment for one of my SVN repositories for trac to show source code in it's repo browser and I set the ...
1
vote
0answers
28 views

Does the secure attention sequence interfere with any rights?

Are there any known issues regarding Rights when 'Disable or enable software Secure Attention Sequence' has been disabled? 'If you set this policy setting to "Services," services can simulate the ...
1
vote
0answers
15 views

NFS export for non-root users

I need non-root users to be able to export folders over NFS on a shared system. There are a lot of users, several hundred, who may potentially log into the system. All of them should be able to ...
1
vote
0answers
7 views

Php-fpm corrupts my socket permission on startup

I've installed Apache2.2 with FastCgi module, and PHP-fpm on a Centos server. I configure FastCgi with an external server using the socket option: FastCgiExternalServer ...
1
vote
0answers
16 views

Forcing/inheriting permissions on NFS share

I'm trying to NFS share a directory on a CentOS machine to several OS X machines with Apache Directory Studio. Multiple users are going to access it and they are in the same group. I've been able to ...
1
vote
0answers
65 views

DFS-R replication: NTFS permissions don't work on some subfolders on members

I've setup DFS-R (Hub and spoke) for a share between 6 Windows 2012 R2 servers. The share on all servers is called "Websites$" with "full access" permission for everyone. All servers have high ...
1
vote
0answers
105 views

How to deal with Upstart “terminated with status 1”?

I have a very simple script on Ubuntu 14.04 upstart (/etc/init/myscript.conf) description "Something" author "me" start on filesystem and started networking stop on shutdown respawn respawn limit 5 ...
1
vote
0answers
24 views

Giving multiple users access to a shared mailbox in Exchange 2010 not working like I want it to

So If I make a shared mailbox, right-click on it, and 'Manage Full-Access Permissions'. I click 'Add', and procede to search and add a user. I do this two or three more times with different users I ...
1
vote
0answers
41 views

Server 2008 R2 permissions not working

First of all: i posted this yesterday but put in the wrong email so I can't access it again. I am configuring a 2008 R2 server for learning experience. The problem I'm having is the following: ...
1
vote
0answers
59 views

Directory permissions for user account linux

I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working. My idea was to ...
1
vote
0answers
27 views

Proftpd user permissions issue

I just installe proftpd on Ubuntu 15.04 and it works fine i made a permission setting for my ftp user called "ftp" there has the dir "/home/ftp/" but i have a problem because i have a folder inside my ...
1
vote
0answers
73 views

AWSLambdaExecute policy definition

Foreword: I'm not asking for configuration help. My use case is covered and working fine. This is a theoretical question. On AWS there is a policy called AWSLambdaExecute which is defined as follows: ...
1
vote
0answers
161 views

“Permission denied” to a directory that I own, permissions seemingly correct

Setting up a Docker image based on Debian 8, specifically the nginx image with uwsgi added. The web service in question will run via uwsgi as www-data. The service is copied in to the container with a ...
1
vote
0answers
301 views

How to change permission of users in RDS?

We have created a MySQL RDS instance on AWS called "lolbob" and while dumping our data over port 3306 using the user that was created during instance creation (also called "lolbob") it fails because ...
1
vote
0answers
386 views

freebsd cannot start mysql for the first time

I am having the same issue as this person serverfault link but the solution completely does not work for me. I cannot start mysql5.5 for the very first time. At first start of mysql with cd ...
1
vote
0answers
251 views

permission denied using a public key with Copssh on a windows 2003 server

I've a Windows 2003 SP2 server with CopSSH version 1.1.0.1 installed. I've a user set up for SFTP who is able to transfer files from two servers. I am trying to add the public keys he provided me so ...
1
vote
0answers
18 views

Are there issues with making a ldap database group readable?

I'm managing several CentOS 6.5 machines using ldap and kerberos for user accounts and authentication. I want to back up the ldap database as well as other root owned files stored on server1 to ...
1
vote
0answers
343 views

Issue with folder permission in file server migration - Share Parmissions VS NTFS Permissions

I am migrating a file server form 2003 to 2012 R2. There are about 50TB of files with thousands of individual permissions. I have successfully migrated the files to the new server, including their ...
1
vote
0answers
301 views

vSphere 5.1 Permissions Not Propagating

When I add permissions at the data center level with the propagate option, I see the account in the permissions list on the individual servers but the privileges aren't taking effect. The privileges ...
1
vote
0answers
225 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
197 views

What is a safe alternative to wildcards in /etc/sudoers?

In the /etc/sudoers file on my Red Hat server, I have this line: %webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/* This is clearly a bad idea, since someone could do something like this: sudo ...
1
vote
0answers
367 views

File permission problems with Apache, FastCGI, and Prestashop

I am running a Prestashop installation on CentOS 6.5 and Apache 2.2.15. A while back I updated Apache and lost the ability to upload product images via Prestashop backoffice along with other problems, ...
1
vote
0answers
20 views

Requiring owner auth for non-guest enabled shares

With the following options usershare path = /var/lib/samba/usershare usershare max shares = 9001 usershare allow guests = yes usershare owner only = true I have the following issues: this ...
1
vote
0answers
284 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
148 views

Recalculate Windows inherited ACLs for hardlinks

How do I get Windows to recalculate the inherited permissions of a file? A tool (Mercurial) created multiple NTFS hardlinks to the same file from different directories. I can see them using fsutil ...
1
vote
0answers
114 views

Why does Windows Installer check the volume information of a shared drive when installing a file within the shared drive?

I'm running into an issue where one of my users is having trouble installing a Windows Installer file. The file is located on a shared drive that the user doesn't have complete access to, but the user ...
1
vote
0answers
149 views

phpmyadmin not working after mysql update

i followed this guide to update my mysql form 5.1 to 5.5. After lots and lots of command and headache, i was able to upgrade mysql. i checked the version via terminal. But now there is another ...
1
vote
0answers
580 views

Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges

My system: CentOS 6.5 + MySQL 5.6 I have created a backupuser for mysqldump: CREATE USER 'usr_backup'@'localhost' IDENTIFIED BY 'XXX'; GRANT USAGE ON *.* TO 'usr_backup'@'localhost' IDENTIFIED BY ...
1
vote
0answers
115 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
1
vote
0answers
217 views

PHP upgrade always breaks session folder permissions

Every time I upgrade php (via yum upgrade) on my CentOS box, my /var/lib/session folder ownership becomes root:apache with 600 permissions. I use nginx as my web server. This breaks my site and ...
1
vote
0answers
90 views

How to write a file from Apache CGI in a user home directory on CentOS

I made a CGI in Python and it works unless I try to write to a file in a user's home. I activated allow_httpd_anon_write and allow_http_sys_script_anon_write to true with graphical tool for ...