Questions tagged [permissions]
In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.
3,646
questions
0
votes
0
answers
20
views
Access is denied, with Gstreamer audio capture on Windows Server 2022
Note: I'm posting to ServerFault with this as I believe there's some sort of permissions or isolation or perhaps missing system component needed specifically for Windows Server. This is not a general ...
- 1,425
10
votes
4
answers
3k
views
How do I prevent users from messing with their own .ssh folder?
I'm administrating a RedHat server where users log in through SSH with private/pub key based authentication.
I'd like to prevent them from accidentally changing / deleting /chmoding the content of ...
- 203
0
votes
0
answers
22
views
Zabbix Permission denied for read log from item of teample
Error:
Value of type "string" is not suitable for value type "Numeric (float)". Value "tail: cannot open '/home/user/mc/plugins/Skript/logs/tps.log' for reading: Permission ...
0
votes
2
answers
38
views
Linux user can't access mergerfs directory that he already has permissions
I use proxmox on top of Debian 12 (bookworm).
As root user I set the owner for the directory '/data' to berdux:berdux and even set permissions to 777.
Then I mount 4 disks to this folder with mergerfs ...
0
votes
2
answers
33
views
wordpress directory file ownership changes everytime after uploading files/plugins
on centos 7, i have created wordpress website with root directory ownership websitename:websitegroup and directory permissions 755, file permissions 644 set by default
when the developer, login to ...
0
votes
1
answer
50
views
Windows shared folder accessible only by Administrators
Windows Server 2012 R2.
A shared folder was created and the permissions set to full control.
The share is only accessible by Administrators.
Why?
- 11
0
votes
0
answers
19
views
Windows server 1012 shared folder access issue [closed]
I have 4 2012 windows servers. 3 of which I cannot access the shared folders on. I get
an error that says that I don't have permissions. I have verified that the share permissions has "everyone&...
- 1
0
votes
0
answers
52
views
"/etc/nginx/nginx.conf is meant to be read-only" when editing with nano after upgrading Ubuntu 20.04 to Ubuntu 22.04
I am recently upgraded Ubuntu Server 20.04 to Ubuntu Server 22.04. It is a LEMP server running the latest Mainline version of Nginx. After the upgrade, when I try modifying the /etc/nginx/nginx.conf ...
- 69
0
votes
0
answers
57
views
pg_ctl start on Windows gives error: could not open file "global/pg_control": Permission denied
On Windows Server 2022, I am logged in as Administrator and trying to do a pg_ctl start on a Postgresql database that was initially created by user SYSTEM, but get the following error in the cmd ...
- 1
0
votes
0
answers
43
views
Portainer can't access docker socket without chmod 666 workaround
Environment: Alpine Linux (3.18)
I've got a portainer docker container that can't access the docker socket. I've added my user to the docker group. I make the container with the following command:
...
- 315
1
vote
0
answers
16
views
permissions and rights on a shared drive
I don't understand exactly how things work and how to solve the following correctly.
I have a mounted HD to my server, to this I upload and download photos from domain X. This works perfectly. Domain ...
- 111
1
vote
1
answer
54
views
macOS: Open GUI application over SSH not possible
I'm working on automating the installation of a macOS application using Ansible. I am installing the application by copying its .app folder from a .dmg image to the /Applications/ directory.
After ...
0
votes
0
answers
27
views
Deny deletion of file but then programs cant save new files. (With a twist)
This has been covered a million times, but after trying every suggestion on here, I am still stuck.
I have a Windows 10 system. We need to lock down a folder to allow files to be created (both ...
0
votes
0
answers
23
views
Why am I not able to revoke GraphAPI Permissions in Graph Explorer Sandbox?
When I go to https://developer.microsoft.com/en-us/graph/graph-explorer and log in with my Azure account, I cannot revoke access to mail.send:
And am presented with this message:
"You require ...
- 87
0
votes
2
answers
45
views
Incorrect Permissions and Ownership in /etc/nginx/sites-available Folder for Containers
I seem to have encountered an issue with the default permissions and ownership of the containers within my /etc/nginx/sites-available directory. The current permissions and ownership structure appears ...
0
votes
1
answer
123
views
Wordpress permissions issue - How to set ownership and permissions for WordPress files properly and securely?
I am facing some problems with setting up WordPress on my local server. After a successful connection to the local database, Wordpress dropped me Unable to write to the wp-config.php file.. I created ...
- 5
0
votes
0
answers
80
views
How can I get all folders associated with an Active Directory group using powershell or something similar?
At my job we have hundreds of AD groups that we add users to to give them access to folders. For each folder/group of folders we give access to there is supposed to be a read, write, and modify group. ...
- 13
0
votes
0
answers
15
views
Azure AKS Persistent Volume and Storage class permissions
I am looking for specific permissions that will allow read access to view the storage configurations and set up in Azure AKS.
There just doesn't seem to be anyway to provide limited read access to ...
- 170
0
votes
0
answers
48
views
No read/write access to files owned by root, when using sshfs as root
I am using sshfs. I log in as root: sshfs [email protected]:/ /mnt/remotes/domain.pl-root (using keys). The login process is successful. When I create any file anywhere in /mnt/remotes/domain-root/, its ...
- 103
0
votes
0
answers
35
views
Apache 2.4 ProxyPass to url results in errors 403 and 502 for Diaspora and Mastodon
I'm trying to run Diaspora and Mastodon on my server (crazy idea, right?) and Apache's ProxyPass won't work to localhost ports 3000 (Diaspora) and 4000 (Mastodon). I get a 403 for both https://...
- 1
0
votes
1
answer
32
views
Protecting the service of a specific application
We have a business requirement where we don't want even Admins to be able to stop a service of a specific application running on windows machines. Reason being the application plays an important role ...
0
votes
0
answers
248
views
SonarQube Installation Issue - “Fail to unzip plugin [python]”…”Operation not permitted”
I'm having an issue where SonarQube 10.1.0 Community seems to be having a difficult starting for the first time.
I've set it up using Kubernetes (K3s v1.27.1) and adapted the official SonarQube Helm ...
0
votes
0
answers
187
views
What are the proper permissions and ownership (including wp-config.php and .htaccess) for Wordpress installations on a LEMP server
I am running an Ubuntu based Linux/Nginx/MariaDB/PHP (LEMP), server with my Wordpress installation in the root account at /var/www/example.com/. My Wordpress is running as the www-data user, and Nginx ...
- 69
0
votes
1
answer
66
views
NT Security Descriptor
In active directory an object have several permissions on many objects.
how to view permissions of particular object?
i am asking like for eg user Kavin have read permissions on some folder, full ...
0
votes
1
answer
135
views
Why don't I have permission to create this directory / file? Permissions on Debian 11 Linux
I thought I understood Linux permissions, but alas... why don't I have permissions here?
I'm part of the www-data group:
docker@docker01:/home/docker$ id
uid=1002(docker) gid=998(docker) groups=998(...
- 1,173
0
votes
0
answers
27
views
0x80004005 when performing administrative tasks
We have an AD network, and a group of users has higher privileges than the standard, configured via GPO in Computer Configuration > Policies > Windows Settings > Security Settings > ...
- 302
0
votes
0
answers
12
views
Specific olcAccess does not work for an OU in LDAP
On my OpenLDAP server, I would like the accounts in my "ou=partners" OU to have "read" permissions to all objects in "ou=abos". Here is the tree of my DIT :
[ditTree][1]
...
0
votes
1
answer
119
views
Cannot execute PHP binary as non-root user in Plesk server (Linux)
I am running Plesk 18.0.44 on my Debian 9.13 server. It has multiple subscriptions and hence different users for these vhosts. I was always able to run /opt/plesk/php/7.4/bin/php -v as a vhost user (...
- 101
0
votes
0
answers
60
views
Which service principal role will provide the minimum permissions necessary to automate installation of a website certificate?
I wish to grant a third-party application API access to my Azure tenant for purposes of installing a TLS certificate on a certain website ("App Service," in Azure terminology).
However, ...
- 753
0
votes
0
answers
145
views
Auth/permission issues with Dovecot/Postfix with virtual users and dovecot Passwd-file
I currently have Postfix/Dovecot email-server configured to run a local system account (Dovecot auth-system) and everything runs fine with a local user set up using /etc/passwd, /etc/shadow.
I would ...
- 1
0
votes
0
answers
21
views
W.A.C. feature enabling prevented by "MultiPoint Repair Service"
Win 10 Pro(Activated)
Device Owner: Myself(as Administrator Account)
Version:22H2
HP EliteBook
Toshiba Satellite
-I run 2 copies of Win 10 Pro both are activated and legitimate.
-I have not attempted ...
0
votes
1
answer
293
views
How to migrate User Data to OneDrive without granting administrators permissions
Performing a migration of all users "personal" files to OneDrive and I'm quite new to this all.
My small organization is in the process of migrating to SharePoint and OneDrive, and our Users ...
0
votes
1
answer
711
views
How to take ownership of all contents in CSC folder?
I have files that was saved as offline files from a Synology server to the CSC folder on my computer that I would like to delete. I cannot delete the files unless I individually take ownership of ...
0
votes
0
answers
37
views
Why do users in the administrators group not show they are in the group from a sssd joined host?
Noticed that when running id usertocheck or groups usertocheck the users in the administrators group did not show that group listed.
Checking on the windows dc with net user usertocheck shows ...
- 249
0
votes
1
answer
371
views
Move docker compose wordpress with local volume to new host with correct permission
I'm struggling to migrate / move my Docker Compoe project with Wordpress and Mysql to a new host.
My docker-compoye.yaml is as follows:
version: '3.1'
services:
wordpress:
image: wordpress
...
- 101
0
votes
0
answers
389
views
OSError: [Errno 30] Read-only file system: <relative_path_to_file>
(On Ubuntu 22.04 LTS)
When trying to create or edit any file or directory on my hard drive I get a 'Read-only file system'-error (two days ago I could still do that):
$ whoami
mattia
$ mkdir example
...
- 1
0
votes
0
answers
223
views
Error writing lock file: Permission denied
(On Ubuntu 22.04 LTS)
After connecting my NAS drive with the mount command in the nashome directory,
the following error occurs, when trying to edit or create any file in the mounted directory tree:
[ ...
- 1
3
votes
0
answers
313
views
Unable to su or ssh as anyone but root on CentOS 7
I seem to be unable to ssh or su as a local user on my CentOS 7 machine as of today.
$ adduser ndejay
$ passwd ndejay
Changing password for user ndejay.
New password:
Retype new password:
$ su ndejay
...
- 209
0
votes
2
answers
89
views
Best Path for nginx Files [closed]
I've always struggled with various paths for nginx files and where they should be positioned. As we know, we can change where we can park both the www directories for our web app, as well as the ...
- 125
0
votes
0
answers
264
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
0
votes
0
answers
171
views
How to enable sudo and disbale sudo su on ubuntu 20.04
We need to capture user commands, on logs now the user has Sudo access. we have planned to disable sudo and they need to use sudo before the command. How to enable sudo and disable sudo su on ubuntu ...
- 1
0
votes
1
answer
590
views
stat Permission denied for user that belongs to the group
I installed nginx in a machine, and the site is not working because the user that nginx uses (www-data) doesn't have access to the folder with the site contents.
I decided to add the user www-data to ...
1
vote
0
answers
107
views
permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS
I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports
/nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
- 133
0
votes
0
answers
78
views
Auditing Domain Administrators - Best practice / Advice needed please
Please do advise if I am posting in the wrong place, I have not found this the easiest site to navigate (or maybe it is me...).
I have been tasked with auditing and fixing our privileged accounts ...
0
votes
1
answer
828
views
Sudo privileges limited to a specific group of users
I'm configuring our new Ubuntu 22.04 VPS to host our react app and REST API.
I followed this tuto that seems relatively advanced and complete :
https://gofoss.net/server-hardening-advanced/
I'm ...
0
votes
0
answers
363
views
Unable to perform Streaming Inserts for Google BigQuery API
For Streaming Inserts we found in the quotas section of the existing account that a default limit is already present but we are not able to access it in the free tier. As per documentation it is ...
0
votes
0
answers
30
views
Optimal Firebase Realtime Database user groups and permissions design
I'm attempting to design a Realtime Database with Firebase that will be scalable as our company grows, and I'm not sure what will be most beneficial long term.
I'm looking to create user groups to ...
0
votes
0
answers
202
views
Why do all users still have full access in my samba server after i have set limited permissions?
I have a debian 11 server running samba and is hosting a share of a drive that's mounted in fstab. I have added "acl" to the fstab and installed acl in the samba config.
To be clear: my end ...
- 1
4
votes
1
answer
765
views
How to make get_current_user() return the same user as $_SERVER['AUTH_USER']?
I have a PHP app that uses LDAP for logging in. The app is served on Windows Server with IIS.
In the past, I was using $_SERVER['AUTH_USER'] to get the remote Windows user that was using the app:
$...
- 229
1
vote
1
answer
416
views
Create shared folder as active directory would in powershell
With Active Directory I can manually create new users. Every time I do that, I use right click -> Copy on that user, then I modify some things like Name, Surname and SamAccountName. This process ...
- 11