In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

4
votes
0answers
538 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...
3
votes
0answers
301 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
3
votes
0answers
142 views

Check that a given user has a given priviledge

Given a pair of a user and a privilege I need to determine if a user have the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
2
votes
0answers
40 views

I removed all permissions on C:\ Server 2012 R2 Core

Really stupid move, I know this. I was granting permissions to one of our users on the C: directory of on of our servercore machines. I used icacls /grant :r and removed all the permissions to the ...
2
votes
0answers
68 views

WMI computersystem get username returns null

I'm having an issue with the below WMI query running under a non-admin service account against windows 7 PCs: wmic /node:x.x.x.x computersystem get username where x.x.x.x is the IP address of the ...
2
votes
0answers
22 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
2
votes
0answers
147 views

MySQL permission errors

It seems that on a Ubuntu 14.04 machine the user mysql cannot access anything. It is not writing logs nor reading files. Witness: - bruno():mysql$ cat /etc/passwd | grep mysql mysql:x:116:127:MySQL ...
2
votes
0answers
13 views

Give group of users install privilages in R but not affect root install?

So we have a few users who use a number of servers for various computations. They constantly ask us to install packages from bioconductor and cran for R. It's a real bother and truthfully they can ...
2
votes
0answers
129 views

Creating an Openstack user with only reboot permissions

What is the best approach for setting up an Openstack user that is limited to only rebooting servers using the Web API. The user needs to be able to access servers under different tenants, by using ...
2
votes
0answers
371 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
0answers
106 views

What permissions are needed on Mailbox database to call FindAppointments for all mailboxes?

I have a small application that retrieves all appointments from Exchange 2010 and puts them in a timesheet management app. The code to retrieve the appointments is as follows (it uses Exchange Web ...
2
votes
0answers
363 views

FUSE mounted Google Drive (via google-drive-ocamlfuse) for Wordpress and permission issues

My objective is to use Google Drive to store media files for a Wordpress multisite using Fuse, and so far I am able to mount Google Drive with google-drive-ocamlfuse as root. I can mount the Google ...
2
votes
0answers
69 views

Windows Server 2012 Shares vs. Windows Explorer Sharing

When I use the server manager in WS2012 and create a new share, point it at a folder and give everybody permission to read, it works very strangely: From a client computer, I can access the server in ...
2
votes
0answers
4k views

iSCSI issue; “the media is write protected”

i've got some serious issues with w2k8 r2 standard and iSCSI controller. i'm running dell server, connected via ethernet to synergy NAS, which is handling LUN via iSCSI. i'm using ms iSCSI initiator ...
2
votes
0answers
218 views

Deny Delete Windows SMB fileshare - Mac OS X client

I'm struggling with this one. We have a folder within a shared drive that a certain group (group1) of users that can read/write and delete their own files and folders. However there is one account in ...
2
votes
0answers
320 views

Trac permission denied for SVN repo

I'm running Apache2,SVN & Trac on OpenSUSE. SVN works like a charm. I've initialized trac environment for one of my SVN repositories for trac to show source code in it's repo browser and I set the ...
1
vote
0answers
59 views

How to change permission of users in RDS?

We have created a MySQL RDS instance on AWS called "lolbob" and while dumping our data over port 3306 using the user that was created during instance creation (also called "lolbob") it fails because ...
1
vote
0answers
97 views

freebsd cannot start mysql for the first time

I am having the same issue as this person serverfault link but the solution completely does not work for me. I cannot start mysql5.5 for the very first time. At first start of mysql with cd ...
1
vote
0answers
16 views

Are there issues with making a ldap database group readable?

I'm managing several CentOS 6.5 machines using ldap and kerberos for user accounts and authentication. I want to back up the ldap database as well as other root owned files stored on server1 to ...
1
vote
0answers
101 views

Issue with folder permission in file server migration - Share Parmissions VS NTFS Permissions

I am migrating a file server form 2003 to 2012 R2. There are about 50TB of files with thousands of individual permissions. I have successfully migrated the files to the new server, including their ...
1
vote
0answers
92 views

NFS Write Permissions — ls -l shows I have it; I actually don't

I have an NFS server serving several clients. Permissions work fine with all clients except one. The client mounts the nfs share fine, with permissions all correctly placed to the right users. ...
1
vote
0answers
122 views

vSphere 5.1 Permissions Not Propagating

When I add permissions at the data center level with the propagate option, I see the account in the permissions list on the individual servers but the privileges aren't taking effect. The privileges ...
1
vote
0answers
31 views

Permission for creating an event source

I have a WCF logging service that can write to the event log. The only problem is that the event source it writes to has to already exist and it cannot create it because the app pool the service is ...
1
vote
0answers
127 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
329 views

User in Administrators group has not the same rights as Administrator (Win 2012 R2)

I have created a user admin and putted this user in the Administrators Groups (local, there is no AD). But This admin user has not the same rights as the Administrator user itself. Example 1: a file ...
1
vote
0answers
322 views

Unable to use rsnapshot to sync non-owned files but able to do it with plain rsync command

I am trying to use rsnapshot to sync remote file to my own computer. However, I have some trouble when I need to access files which are not owned by user who is SSH-ing to the remote machine. My ...
1
vote
0answers
147 views

What is a safe alternative to wildcards in /etc/sudoers?

In the /etc/sudoers file on my Red Hat server, I have this line: %webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/* This is clearly a bad idea, since someone could do something like this: sudo ...
1
vote
0answers
221 views

File permission problems with Apache, FastCGI, and Prestashop

I am running a Prestashop installation on CentOS 6.5 and Apache 2.2.15. A while back I updated Apache and lost the ability to upload product images via Prestashop backoffice along with other problems, ...
1
vote
0answers
52 views

Granting user enough privileges to run ifconfig on IllumOS (OmniOS)

I sense this should be a very simple question, but somehow I cannot find a solution. I have a non-root user and I would like to grant this user enough permissions or privileges, so he can run ...
1
vote
0answers
20 views

Requiring owner auth for non-guest enabled shares

With the following options usershare path = /var/lib/samba/usershare usershare max shares = 9001 usershare allow guests = yes usershare owner only = true I have the following issues: this ...
1
vote
0answers
182 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
83 views

Recalculate Windows inherited ACLs for hardlinks

How do I get Windows to recalculate the inherited permissions of a file? A tool (Mercurial) created multiple NTFS hardlinks to the same file from different directories. I can see them using fsutil ...
1
vote
0answers
122 views

Allow a user to access a single Git repository

Consider a server that hosts several Git repositories: $ ls -l /opt/git/ drwxrwxr-x 7 ubuntu root 4096 Jan 2 2014 george.git drwxrwxr-x 7 ubuntu root 4096 Dec 29 2013 john.git drwxrwsr-x 7 ...
1
vote
0answers
61 views

Why does Windows Installer check the volume information of a shared drive when installing a file within the shared drive?

I'm running into an issue where one of my users is having trouble installing a Windows Installer file. The file is located on a shared drive that the user doesn't have complete access to, but the user ...
1
vote
0answers
108 views

phpmyadmin not working after mysql update

i followed this guide to update my mysql form 5.1 to 5.5. After lots and lots of command and headache, i was able to upgrade mysql. i checked the version via terminal. But now there is another ...
1
vote
0answers
394 views

Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges

My system: CentOS 6.5 + MySQL 5.6 I have created a backupuser for mysqldump: CREATE USER 'usr_backup'@'localhost' IDENTIFIED BY 'XXX'; GRANT USAGE ON *.* TO 'usr_backup'@'localhost' IDENTIFIED BY ...
1
vote
0answers
86 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
1
vote
0answers
53 views

How to write a file from Apache CGI in a user home directory on CentOS

I made a CGI in Python and it works unless I try to write to a file in a user's home. I activated allow_httpd_anon_write and allow_http_sys_script_anon_write to true with graphical tool for ...
1
vote
0answers
59 views

Domain User blocked by a single server

Today, I had a user call me with an issue. He couldn't access a Desktop shortcut that's defined by group policy. The shortcut was pointing to a shared folder on our web server (W-01). All other ...
1
vote
0answers
139 views

Start/Stop IIS site automated as an administrator, which is not a built-in “Administrator”

There are several ways to start/stop an IIS site, in a way that does not require logon to the system. For example: 1) Command line via APPCMD: C:\windows\system32\inetsrv\appcmd.exe stop site ...
1
vote
0answers
127 views

WebDAV OSX Permissions to restrict upload

I have a WebDav server I have working on OSX ML - access is secure but I just moved my files to an external drive I didn't need to modify directory permissions on the drive and it still works and ...
1
vote
0answers
113 views

NTFS Permissions Overhaul

Essentially I am required to do a complete overhaul on a rather old (and messy) Windows server NTFS permissions. I have a Powershell script which gives me the information I need for permissions but ...
1
vote
0answers
315 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...
1
vote
0answers
109 views

Lost web permission after upgrading CentOS from 5.6 to 5.10

I upgraded CentOS from 5.6 to 5.10 using the following simple commands while logged in as root: yum update yum upgrade Now, I can no longer access web pages. All requests, regardless of type of ...
1
vote
0answers
990 views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
1
vote
0answers
75 views

Weird permissions getting set on directories after rsync

I've got a drive on a Mac (OSX 10.7.5) that I'm sharing on the LAN. In the system preferences, the share is set so System Administrator has Read & Write access, System Group has Read Only, and ...
1
vote
0answers
122 views

What are recommended permissions for files in /var/log?

I am working on tightening the security for various servers (mainly Debian Linux), and one of the tasks is to tighten permissions on files in /var/log so that files are not world readable. But there ...
1
vote
0answers
49 views

Running an AppFabric Monitoring Script Without Using a Local Admin

According to this page - I must run any AppFabric administration commands as a user w/ administration privileges. "The security identity of the person using these Windows PowerShell commands ...
1
vote
0answers
43 views

Apache, php, maven and me—pemissions…

I have setup a local Apache2, with PHP and mysql. I wrote a maven build script to deploy my page on that local server. All that is working fine except for one thing: When I instruct maven to clean up ...
1
vote
0answers
62 views

Prevent user deleting directory junction

I have a setup where there's a directory junction in a network share which points at a directory outside of the share. No matter what permissions I set, the user is able to delete the junction ...