In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

4
votes
0answers
528 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep /dev/...
4
votes
0answers
2k views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
3
votes
0answers
33 views

Strange NTFS Permissions issue on Windows Share + Win 8.1 Clients

Server 2012 R2 file server -- the share is exposed over a DFS namespace. I have a group called "share" that all the users are members of. This group has read/write access to the root of the DFS share ...
3
votes
0answers
358 views

NFS Write Permissions — ls -l shows I have it; I actually don't

I have an NFS server serving several clients. Permissions work fine with all clients except one. The client mounts the nfs share fine, with permissions all correctly placed to the right users. ...
3
votes
0answers
46 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
3
votes
0answers
6k views

iSCSI issue; “the media is write protected”

i've got some serious issues with w2k8 r2 standard and iSCSI controller. i'm running dell server, connected via ethernet to synergy NAS, which is handling LUN via iSCSI. i'm using ms iSCSI initiator ...
2
votes
0answers
25 views

permission to change Windows password in non AD environment

We have a computer running Windows Server 2012 R2, which is not member of any domain, and a web application running on this server. Users of the application are set up as local Windows users of the ...
2
votes
0answers
31 views

Preserve Linux Capabilities in Debian Package

I'm building a package containing a web service that needs to listen on port 443. The service itself is written in Go, so I can't use authbind to manage the port permissions. Instead, I've opted to ...
2
votes
0answers
33 views

FTP account for just one directory

Background information: I'm using Serverpilot to manage my Ubuntu server which doesn't provide any FTP service. There is a user: serverpilot With the home directory: /srv/users/serverpilot/ And ...
2
votes
0answers
145 views

Error 1606 - MSIs, UNC paths and permissions?

I have a persistent issue with a number of our Windows desktop systems where we see various MSI packages throw up error 1606 (and 1314, in the MSI log), which is a permission issue, when attempting to ...
2
votes
0answers
54 views

Allow ssh when g+w on user's home directory

Is it possible to allow one user to connect via SSH when that user's home directory is g+w? As I understand it, I can allow this if I set StrictModes no in /etc/ssh/sshd_config, but that would mean ...
2
votes
0answers
149 views

AWSLambdaExecute policy definition

Foreword: I'm not asking for configuration help. My use case is covered and working fine. This is a theoretical question. On AWS there is a policy called AWSLambdaExecute which is defined as follows: ...
2
votes
0answers
292 views

I removed all permissions on C:\ Server 2012 R2 Core

Really stupid move, I know this. I was granting permissions to one of our users on the C: directory of on of our servercore machines. I used icacls /grant :r and removed all the permissions to the ...
2
votes
0answers
436 views

WMI computersystem get username returns null

I'm having an issue with the below WMI query running under a non-admin service account against windows 7 PCs: wmic /node:x.x.x.x computersystem get username where x.x.x.x is the IP address of the ...
2
votes
0answers
188 views

Permission for creating an event source

I have a WCF logging service that can write to the event log. The only problem is that the event source it writes to has to already exist and it cannot create it because the app pool the service is ...
2
votes
0answers
562 views

Roaming Profile where user NOT owner, but no errors seen

Here I am complaining that I am NOT seeing errors. This might seems strange, but the expected behaviour, as I understand it, is that I should see errors under this configuration. We have had roaming ...
2
votes
0answers
227 views

MySQL permission errors

It seems that on a Ubuntu 14.04 machine the user mysql cannot access anything. It is not writing logs nor reading files. Witness: - bruno():mysql$ cat /etc/passwd | grep mysql mysql:x:116:127:MySQL ...
2
votes
0answers
14 views

Give group of users install privilages in R but not affect root install?

So we have a few users who use a number of servers for various computations. They constantly ask us to install packages from bioconductor and cran for R. It's a real bother and truthfully they can ...
2
votes
0answers
161 views

Creating an Openstack user with only reboot permissions

What is the best approach for setting up an Openstack user that is limited to only rebooting servers using the Web API. The user needs to be able to access servers under different tenants, by using ...
2
votes
0answers
568 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
0answers
189 views

What permissions are needed on Mailbox database to call FindAppointments for all mailboxes?

I have a small application that retrieves all appointments from Exchange 2010 and puts them in a timesheet management app. The code to retrieve the appointments is as follows (it uses Exchange Web ...
2
votes
0answers
250 views

PHP upgrade always breaks session folder permissions

Every time I upgrade php (via yum upgrade) on my CentOS box, my /var/lib/session folder ownership becomes root:apache with 600 permissions. I use nginx as my web server. This breaks my site and ...
2
votes
0answers
468 views

FUSE mounted Google Drive (via google-drive-ocamlfuse) for Wordpress and permission issues

My objective is to use Google Drive to store media files for a Wordpress multisite using Fuse, and so far I am able to mount Google Drive with google-drive-ocamlfuse as root. I can mount the Google ...
2
votes
0answers
113 views

Windows Server 2012 Shares vs. Windows Explorer Sharing

When I use the server manager in WS2012 and create a new share, point it at a folder and give everybody permission to read, it works very strangely: From a client computer, I can access the server in ...
2
votes
0answers
319 views

samba treat user as other or ignores group permissions

I have a server running with Ubuntu 12.10 and several Clients running Windows 7. I use Samba as domain controller. Everything works fine except the shared folder. I made a shared folder and configured ...
2
votes
0answers
240 views

Deny Delete Windows SMB fileshare - Mac OS X client

I'm struggling with this one. We have a folder within a shared drive that a certain group (group1) of users that can read/write and delete their own files and folders. However there is one account in ...
2
votes
0answers
388 views

Trac permission denied for SVN repo

I'm running Apache2,SVN & Trac on OpenSUSE. SVN works like a charm. I've initialized trac environment for one of my SVN repositories for trac to show source code in it's repo browser and I set the ...
2
votes
0answers
2k views

Lost access to execute all MMC based console applications (*.msc files)

Some Background There's a web server; it's on a corporate domain and my domain account is in a group that belongs to the local Administrators group on that machine. At some point, and I haven't been ...
1
vote
0answers
17 views

Configure a server to grant temporary write permission on request?

I'm looking for ways to reduce exposure of a server's shares if ransomware gets onto a client. Users need access to the server's shares, and normally that is read/write access. Write access is needed ...
1
vote
0answers
22 views

sudo-like privilege management for docker containers

I want to allow a Docker container to invoke some actions on another container without granting it full privileges. An example would be a Docker container which does log rotation and reloads the ...
1
vote
0answers
89 views

SQL Server Agent job run as: permissions

I have a number of SQL Server Agent jobs running CmdExec statements. They are simple jobs that call simple batch files. They are run with a Run As: Proxy account, that has permissions to run as a ...
1
vote
0answers
109 views

logrotate as non-root user for files with various owners

I have a collection of log files with various owners. Each log file corresponds to one of a suite of programs, and the permissions are group writable so that whoever starts the program(s) can write to ...
1
vote
0answers
79 views

Windows service control commands for non administrator user

we have two environments, staging and production, both running a windows service. we use a build server to deploy a certain windows service via MSDeploy part of the build steps is running a CMD script ...
1
vote
0answers
73 views

Using UNC Share with IIS ASP.NET 4.6.1

I have some ASP.NET 4.6.2 web sites that I want to run from a UNC share. The reason why I am doing this is to implement IIS Shared Config but as a first step I just want the nodes to run properly. ...
1
vote
0answers
423 views

MySQL /nonexistent home vs “No directory, logging in with HOME=/”

The preinst script in the Debian/Ubuntu packages for MySQL sets the default home directory for the MySQL server to /nonexistent, presumably as a security measure - the MySQL server has its own datadir ...
1
vote
0answers
73 views

Permissions denied to directory owned by a user

I have a similar problem to that posted here, in that a user is unable to access the contents of a directory they own. A quick search shows quite a few other similar questions, however the problem ...
1
vote
0answers
175 views

Microsoft VBScript Runtime error: Permission denied code 800A0046

I am testing a VBScript and it was working fine earlier. Wanted to try with a different file input, but all of a sudden I'm getting Microsoft VBScript Runtime error: Permission denied code 800A0046. ...
1
vote
0answers
20 views

NFS export for non-root users

I need non-root users to be able to export folders over NFS on a shared system. There are a lot of users, several hundred, who may potentially log into the system. All of them should be able to ...
1
vote
0answers
10 views

Php-fpm corrupts my socket permission on startup

I've installed Apache2.2 with FastCgi module, and PHP-fpm on a Centos server. I configure FastCgi with an external server using the socket option: FastCgiExternalServer /var/www/cgi-bin/test/php....
1
vote
0answers
25 views

Forcing/inheriting permissions on NFS share

I'm trying to NFS share a directory on a CentOS machine to several OS X machines with Apache Directory Studio. Multiple users are going to access it and they are in the same group. I've been able to ...
1
vote
0answers
174 views

DFS-R replication: NTFS permissions don't work on some subfolders on members

I've setup DFS-R (Hub and spoke) for a share between 6 Windows 2012 R2 servers. The share on all servers is called "Websites$" with "full access" permission for everyone. All servers have high ...
1
vote
0answers
352 views

How to deal with Upstart “terminated with status 1”?

I have a very simple script on Ubuntu 14.04 upstart (/etc/init/myscript.conf) description "Something" author "me" start on filesystem and started networking stop on shutdown respawn respawn limit 5 ...
1
vote
0answers
34 views

Giving multiple users access to a shared mailbox in Exchange 2010 not working like I want it to

So If I make a shared mailbox, right-click on it, and 'Manage Full-Access Permissions'. I click 'Add', and procede to search and add a user. I do this two or three more times with different users I ...
1
vote
0answers
44 views

Server 2008 R2 permissions not working

First of all: i posted this yesterday but put in the wrong email so I can't access it again. I am configuring a 2008 R2 server for learning experience. The problem I'm having is the following: ...
1
vote
0answers
112 views

Directory permissions for user account linux

I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working. My idea was to ...
1
vote
0answers
54 views

Proftpd user permissions issue

I just installe proftpd on Ubuntu 15.04 and it works fine i made a permission setting for my ftp user called "ftp" there has the dir "/home/ftp/" but i have a problem because i have a folder inside my ...
1
vote
0answers
207 views

“Permission denied” to a directory that I own, permissions seemingly correct

Setting up a Docker image based on Debian 8, specifically the nginx image with uwsgi added. The web service in question will run via uwsgi as www-data. The service is copied in to the container with a ...
1
vote
0answers
355 views

How to change permission of users in RDS?

We have created a MySQL RDS instance on AWS called "lolbob" and while dumping our data over port 3306 using the user that was created during instance creation (also called "lolbob") it fails because ...
1
vote
0answers
544 views

freebsd cannot start mysql for the first time

I am having the same issue as this person serverfault link but the solution completely does not work for me. I cannot start mysql5.5 for the very first time. At first start of mysql with cd /usr/...
1
vote
0answers
326 views

permission denied using a public key with Copssh on a windows 2003 server

I've a Windows 2003 SP2 server with CopSSH version 1.1.0.1 installed. I've a user set up for SFTP who is able to transfer files from two servers. I am trying to add the public keys he provided me so ...