Questions tagged [user-permissions]
The user-permissions tag has no usage guidance.
417
questions
0
votes
0
answers
46
views
Grant permission to user on AD for installing only drivers
I need to grant permission to one user to install only drivers.
Is there such an option? Or another option to grant permission?
0
votes
1
answer
117
views
How to chown a directory on a mounted samba share?
I have a linux client mounting a samba share with the following fstab entry:
//<serverip>/<nameofshare> /home/user -o nofail,x-systemd.device-timeout=15s,vers=3.11,user=<sambauser>,...
- 1
0
votes
0
answers
50
views
Windows 10 symbolic links: Finer grained than developer mode?
We have a number of external developers who are not administrators on their Windows 10 machines. In a new project, we have a git repository with lots of symbolic links which we would like to actually ...
0
votes
2
answers
546
views
Incorrect Permissions and Ownership in /etc/nginx/sites-available Folder for Containers
I seem to have encountered an issue with the default permissions and ownership of the containers within my /etc/nginx/sites-available directory. The current permissions and ownership structure appears ...
0
votes
0
answers
73
views
How to trace process that has already terminated? And even trace back its parent process?
I am able to jail specific commands execution by a proxy script to a user whose sudo privilege is only this script sodo check here for how to. Also the sodo script logs whatever critical commands they ...
- 560
0
votes
0
answers
43
views
Access to SMB folder from LocalService account
this is the situation:
I have a Synology server with file folder normally accessible from the windows domain computers;
I also have onto the primary domain server an application built onto Apache ...
1
vote
1
answer
2k
views
How can I enable BUILTIN\Administrators for my user
I am working in an Windows active directory environment.
I am connected to a windows workstation with a domain user.
Here is what I see when I type:
whoami /groups
BUILTIN\Administrators Alias ...
- 401
0
votes
1
answer
137
views
NT Security Descriptor
In active directory an object have several permissions on many objects.
how to view permissions of particular object?
i am asking like for eg user Kavin have read permissions on some folder, full ...
1
vote
1
answer
395
views
Linux GID and groups
On Linux systems, /etc/passwd file contains an UID and a GID per user.
GID represents the ID of the primary group of the user.
But we can also set additional groups to a user with /etc/group file.
Is ...
- 401
0
votes
0
answers
262
views
How to enable sudo and disbale sudo su on ubuntu 20.04
We need to capture user commands, on logs now the user has Sudo access. we have planned to disable sudo and they need to use sudo before the command. How to enable sudo and disable sudo su on ubuntu ...
- 1
0
votes
1
answer
1k
views
stat Permission denied for user that belongs to the group
I installed nginx in a machine, and the site is not working because the user that nginx uses (www-data) doesn't have access to the folder with the site contents.
I decided to add the user www-data to ...
1
vote
1
answer
1k
views
How to add nginx configurator group?
I want o create a user group that has permissions to create/edit/view nginx configs without sudo permissions, but I heve no idea how.
Creating a normal user group and setting owner:group to same-owner:...
0
votes
1
answer
130
views
set the permissions on all the files and folders within a directory (CentOS 7.0 )
I kind of new to Linux/Centos world, is there any way to set the permissions on all the files and folders within a directory. I know chmod 777 will set permissions on the directory, but if it already ...
1
vote
1
answer
1k
views
docker group gets dropped from 'groups' after some time, and with it, my user's membership
I have a fresh installation of Linux Mint 22 (Vanessa) and installed docker with
$ sudo apt install docker-compose
$ docker -v
Docker version 20.10.12, build 20.10.12-0ubuntu4
$ sudo systemctl start ...
- 429
0
votes
3
answers
1k
views
Deleted my Home folder now I cant remotely connect via SSH
I accidentally deleted the Home directory with sudo rm -r ~, when I try reconnecting the ssh returns
ssh -v key.pem ec2-user@PublicIP-address
ec2-user@PublicIP-address: Permission denied (publickey,...
- 1
0
votes
1
answer
100
views
fsecurity command error on netapp
I'm facing an issue while using fsecurity command on my 7-mode netapp :
netapp> fsecurity apply /vol/vol_C/.../security.conf -c
fsecurity: /vol/vol_C/.../security.conf (Line 2): Unable to parse the ...
- 395
0
votes
1
answer
135
views
Error while transferring file permissions
I ran into a problem, wrote a script that compresses pdf files through a program and transfers rights to a new file by copying from the old one to differentiate access to new files.
Here is the part ...
1
vote
2
answers
2k
views
How to allow user to run only specific binaries
I'm adding user logviewer with /sbin/nologin/ and to my system.
My custom service is running eg. sudo -u logviewer less --follow-name /var/log/messages.
But still there are ways to run other command ...
- 121
0
votes
1
answer
783
views
SQL Developer queries are very slow if I am not connected as sys
I want to run my PL/SQL Queries on SQL Developer and created a new user connection. But if I run:
set serveroutput on size unlimited;
begin
dbms_output.put_line('Hello Oracle.');
end;
/
clear ...
2
votes
1
answer
180
views
Periodically audit file permissions for mistaken leaks
I'm looking for a way to periodically check a file system tree for permissions that have been set incorrectly.
The context is:
this is in an academic compute environment, with students, researchers ...
- 2,900
0
votes
1
answer
101
views
Task bar icons context menus won't open unless explorer.exe is run with admin rights
I have a Windows 10 computer which recently began to fail to open right-click context menus on taskbar items. The search box also has odd behavior, it blacks out until you enter something in it and ...
- 1
0
votes
3
answers
2k
views
Prevent user from seeing list of other user's home dir
I want to prevent a user from seeing a list of home directory(of other users). By default, a user can not access other user's home dir but can find another user's home dir like below:
[opc@instance-...
0
votes
2
answers
1k
views
Nested AD Groups RDP permission not applying to new Windows Server 2019 VM
Similar Issue with no responses: Nested AD groups working in local computer groups, but certain servers fail to allow RDP?
I am only new to this environment and the person I took this over from also ...
- 1
1
vote
0
answers
82
views
FTP retrieve user home directory from an admin connection
I'm implementing a cleanup of old files on SFTP server. I have a user named admin who has full access rights on the FTP.
I would like to know if it's possible to retrieve the home directory for ...
- 111
0
votes
2
answers
2k
views
bulk removing direct access to a folder via PowerShell ACL
On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how ...
- 1
0
votes
1
answer
3k
views
Restrict users from saving on their Desktop and saving on a specific folder
Restrict users from saving on their Desktop and saving on a specific folder
I want to restrict my users to save files on their desktop and on a specific folder
like
(C:\Users\user_name\Desktop\Desktop ...
- 103
-2
votes
1
answer
304
views
You don't currently have permission to access this folder. Windows 10 User Authentication Error Dialog Box [closed]
I recently was given Admin rights on my machine at work.
Unfortunately, when I am going through the directory structure I kept getting this message box:
If I hit continue, I need to change the ...
0
votes
2
answers
142
views
After changing user:group the site shows 503 error and even the ipa.ddr.ess:7080 won't let me in; it says "Invalid credentials."
I accidently used this command in the root directory and now the ipa.ddr.ess:7080 won't let me in; it says "Invalid credentials."
the command that I used was
chown -R www-data:www-data /.
...
- 101
2
votes
1
answer
987
views
RoboCopy Access Denied, even with SeBackupPrivilege
My account is a member of the Backup Operators group on the domain and I run PowerShell in elevated admin mode. I checked my privileges with whoami /priv and saw SeBackupPrivilege listed (disabled but ...
- 31
0
votes
0
answers
32
views
Allow to kill mounhelper to all users
I have some machines with kubuntu 20lts, everyday when the machine start and the user's login, smb4k mount shares. But sometimes some shadows didn't mount because mountheper hungs. I need to allow all ...
0
votes
1
answer
2k
views
The rights to move the computers inside the OU without the ability to delete they from the AD
But... How can I do this?
Even if I forbid deleting the computer object directly, the user can still delete the unit.
If it is possible to prohibit deleting the computer, then we cannot move from ...
0
votes
1
answer
2k
views
Get list of AD groups a user is a primary owner of
i would like to get list of AD groups a user is a primary owner of.
i have gone through this question already. But its not giving me the attribute/property whether the user is a primary owner of ...
2
votes
0
answers
2k
views
Allow user/group to start/stop/restart windows service
I have 4 services. All of them are run by an individual user. All 4 users are part of a group I created (ServiceWorkers) which has the Log on as a service user rights assigned. Each service needs to ...
- 121
0
votes
1
answer
398
views
SMB share, from windows, creates files are owned by administrator and permissions and for Everyone. How to force this to be user who created file?
So I have a smb share setup using unisphere. I can login to my windows machine on the domain and my ad account. I can access the share but when creating a file on the share it shows under security ...
- 210
0
votes
0
answers
307
views
In a windows domain, if I define the local Administrator group in Restricted Groups, does it remove Domain Admins?
It is my understanding that in a Windows domain, the Domain Admins group is automatically added to the local Administrators group for all domain members. I need to add another domain account to the ...
0
votes
0
answers
33
views
User rights somehow not working properly on Ubuntu 16.04
Somehow ubunut 16.04 does not allow me to write to a folder, despite the fact that the user is in the group that has write privileges:
$ ll
drwxrwxr-x 6 root grafana 4096 Nov 30 17:47 ./
drwxr-xr-x 4 ...
- 2,172
0
votes
1
answer
3k
views
Running ansible from webserver to manage infrastructure
I have nginx with php app. I have also installed ansible and copied playbooks on this server. What I want to do is run ansible playbooks through webapp. I want to know how to do this safe way.
Nginx ...
- 3
1
vote
0
answers
34
views
AWS organization: What is possible as an admin?
I have a question regarding the possibilities as admin of an organization.
The plan is to link an external AWS account of a freelancer to our organization.
After some research it turns out that the ...
- 11
1
vote
1
answer
257
views
Dynamically sharing file/folder between users on the same machine with subdirectory
I have 3000+ local users on my Linux system. I want to set permissions dynamically for folder or files.
I came across ACLs (Access Control Lists) when I researched this topic. All users home location ...
- 13
0
votes
0
answers
229
views
Tomcat file permissions
I have existing version of tomcat7 which installed with default apt-get.
which is by default running on its own user "tomcat7" On ubuntu 16.
Now I want tomcat9 as well running on same server ...
0
votes
1
answer
2k
views
Using multiple permit open with Match Groups in sshd_config file in AWS
I have an amazon linux 2
Suppose there is an
RDS(oracle) R1, R2
User U1,U2,U3
Group G1,G2
Group G1 has permit open for R1:1521
Group G2 has permit open for R2:1521
U1 is added to Group G1
U2 is added ...
- 9
0
votes
1
answer
186
views
How to enable file auditing for exchange server V15 folder
So I want to enable auditing on this specific folder V15 located under program files>Microsoft>Exchange server
But on the auditing tab I get a Message "you must be an administrator or have ...
- 37
0
votes
1
answer
2k
views
Error 1332 while changing folder permissions with cacls
I want to change the user permissions of the folder C:\Program Files\MyProgram so that every user is allowed to write to that folder.
I am able to set the corresponding user rights manually within the ...
- 176
0
votes
0
answers
975
views
ESXi 6.5.0 create user to log in web UI and start a VM
I need to create an user for vmware that:
Can access to ESXi Web ui
View all the VM with their state
Can start a stopped virtual machine (the vm could change).
What I'm looking for ?
I want to ...
- 172
0
votes
1
answer
414
views
Create user that has SFTP access to everything under vhosts, using Plesk [closed]
I have a Centos 7 server running the latest version of Plesk.
I want to create a user called all_sftp that has sftp only access to everything under /var/www/vhosts/
I've made the user, chrooted so ...
- 57
0
votes
0
answers
1k
views
How to grant specific page access in IIS .NET Framework
I am trying to grant access to anyone to a specific page in IIS. I have main folder with the .NET Framework website in C# in this folder I have Web.config file which has
<authentication mode="...
- 101
1
vote
2
answers
555
views
Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?
I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them.
I have a couple of windows servers running with a couple ...
- 11
2
votes
2
answers
133
views
Since 10 years, did I setup my web server wrong? [closed]
Before story:
We had a vserver with a domain around year 2004-2007 with apache. My father was owner and I was learning little bit from his friend (he was doing that stuff). I learned how to use linux ...
- 21
1
vote
3
answers
2k
views
Permission issues in cloudSQL SQL Server (GCP)
I see permission error when i tried to shrink files/db in CloudSQL sql server.
I know its a managed service and do not have sa user and super privileges.
But is there any similar user like sa (or) ...
- 21
0
votes
2
answers
7k
views
Running a PS as a different user
So I am a real newbie at this and could really use some help. In my company we have user accounts and admin accounts set up for those in my department. We are always logged into our normal user ...
- 1