Questions tagged [permissions]
In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.
3,628
questions
0
votes
1
answer
17
views
NT Security Descriptor
In active directory an object have several permissions on many objects.
how to view permissions of particular object?
i am asking like for eg user Kavin have read permissions on some folder, full ...
0
votes
1
answer
39
views
Why don't I have permission to create this directory / file? Permissions on Debian 11 Linux
I thought I understood Linux permissions, but alas... why don't I have permissions here?
I'm part of the www-data group:
docker@docker01:/home/docker$ id
uid=1002(docker) gid=998(docker) groups=998(...
- 1,161
0
votes
0
answers
20
views
0x80004005 when performing administrative tasks
We have an AD network, and a group of users has higher privileges than the standard, configured via GPO in Computer Configuration > Policies > Windows Settings > Security Settings > ...
- 292
0
votes
0
answers
6
views
Specific olcAccess does not work for an OU in LDAP
On my OpenLDAP server, I would like the accounts in my "ou=partners" OU to have "read" permissions to all objects in "ou=abos". Here is the tree of my DIT :
[ditTree][1]
...
0
votes
1
answer
34
views
Cannot execute PHP binary as non-root user in Plesk server (Linux)
I am running Plesk 18.0.44 on my Debian 9.13 server. It has multiple subscriptions and hence different users for these vhosts. I was always able to run /opt/plesk/php/7.4/bin/php -v as a vhost user (...
- 101
-1
votes
0
answers
28
views
Cannot connect via ssh with password and username without or disable Public and Private key
I am using Macos Ventura. I am trying to connect to a server via ssh. I said yes to the question of whether you want to proceed with the key on the first try. and I got permission denied error. I do ...
- 99
0
votes
0
answers
56
views
Which service principal role will provide the minimum permissions necessary to automate installation of a website certificate?
I wish to grant a third-party application API access to my Azure tenant for purposes of installing a TLS certificate on a certain website ("App Service," in Azure terminology).
However, ...
- 753
-1
votes
0
answers
62
views
Not able to access an SMB share
I have a shared folder on server1.domain1.com, which I can access from server2.domain1.com using my account domain1\user without any issues. This confirms that the file share was created correctly and ...
- 109
0
votes
0
answers
54
views
Auth/permission issues with Dovecot/Postfix with virtual users and dovecot Passwd-file
I currently have Postfix/Dovecot email-server configured to run a local system account (Dovecot auth-system) and everything runs fine with a local user set up using /etc/passwd, /etc/shadow.
I would ...
- 1
0
votes
0
answers
12
views
W.A.C. feature enabling prevented by "MultiPoint Repair Service"
Win 10 Pro(Activated)
Device Owner: Myself(as Administrator Account)
Version:22H2
HP EliteBook
Toshiba Satellite
-I run 2 copies of Win 10 Pro both are activated and legitimate.
-I have not attempted ...
0
votes
1
answer
115
views
How to migrate User Data to OneDrive without granting administrators permissions
Performing a migration of all users "personal" files to OneDrive and I'm quite new to this all.
My small organization is in the process of migrating to SharePoint and OneDrive, and our Users ...
0
votes
1
answer
232
views
How to take ownership of all contents in CSC folder?
I have files that was saved as offline files from a Synology server to the CSC folder on my computer that I would like to delete. I cannot delete the files unless I individually take ownership of ...
0
votes
0
answers
16
views
Why do users in the administrators group not show they are in the group from a sssd joined host?
Noticed that when running id usertocheck or groups usertocheck the users in the administrators group did not show that group listed.
Checking on the windows dc with net user usertocheck shows ...
- 209
0
votes
1
answer
207
views
Move docker compose wordpress with local volume to new host with correct permission
I'm struggling to migrate / move my Docker Compoe project with Wordpress and Mysql to a new host.
My docker-compoye.yaml is as follows:
version: '3.1'
services:
wordpress:
image: wordpress
...
- 101
0
votes
0
answers
285
views
OSError: [Errno 30] Read-only file system: <relative_path_to_file>
(On Ubuntu 22.04 LTS)
When trying to create or edit any file or directory on my hard drive I get a 'Read-only file system'-error (two days ago I could still do that):
$ whoami
mattia
$ mkdir example
...
- 1
0
votes
0
answers
139
views
Error writing lock file: Permission denied
(On Ubuntu 22.04 LTS)
After connecting my NAS drive with the mount command in the nashome directory,
the following error occurs, when trying to edit or create any file in the mounted directory tree:
[ ...
- 1
3
votes
0
answers
180
views
Unable to su or ssh as anyone but root on CentOS 7
I seem to be unable to ssh or su as a local user on my CentOS 7 machine as of today.
$ adduser ndejay
$ passwd ndejay
Changing password for user ndejay.
New password:
Retype new password:
$ su ndejay
...
- 209
0
votes
2
answers
61
views
Best Path for nginx Files [closed]
I've always struggled with various paths for nginx files and where they should be positioned. As we know, we can change where we can park both the www directories for our web app, as well as the ...
- 125
0
votes
0
answers
136
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
0
votes
0
answers
101
views
How to enable sudo and disbale sudo su on ubuntu 20.04
We need to capture user commands, on logs now the user has Sudo access. we have planned to disable sudo and they need to use sudo before the command. How to enable sudo and disable sudo su on ubuntu ...
- 1
0
votes
1
answer
302
views
stat Permission denied for user that belongs to the group
I installed nginx in a machine, and the site is not working because the user that nginx uses (www-data) doesn't have access to the folder with the site contents.
I decided to add the user www-data to ...
1
vote
0
answers
50
views
permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS
I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports
/nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
- 133
0
votes
0
answers
59
views
Auditing Domain Administrators - Best practice / Advice needed please
Please do advise if I am posting in the wrong place, I have not found this the easiest site to navigate (or maybe it is me...).
I have been tasked with auditing and fixing our privileged accounts ...
0
votes
1
answer
300
views
Sudo privileges limited to a specific group of users
I'm configuring our new Ubuntu 22.04 VPS to host our react app and REST API.
I followed this tuto that seems relatively advanced and complete :
https://gofoss.net/server-hardening-advanced/
I'm ...
0
votes
0
answers
239
views
Unable to perform Streaming Inserts for Google BigQuery API
For Streaming Inserts we found in the quotas section of the existing account that a default limit is already present but we are not able to access it in the free tier. As per documentation it is ...
0
votes
0
answers
20
views
Optimal Firebase Realtime Database user groups and permissions design
I'm attempting to design a Realtime Database with Firebase that will be scalable as our company grows, and I'm not sure what will be most beneficial long term.
I'm looking to create user groups to ...
0
votes
0
answers
129
views
Why do all users still have full access in my samba server after i have set limited permissions?
I have a debian 11 server running samba and is hosting a share of a drive that's mounted in fstab. I have added "acl" to the fstab and installed acl in the samba config.
To be clear: my end ...
- 1
4
votes
1
answer
475
views
How to make get_current_user() return the same user as $_SERVER['AUTH_USER']?
I have a PHP app that uses LDAP for logging in. The app is served on Windows Server with IIS.
In the past, I was using $_SERVER['AUTH_USER'] to get the remote Windows user that was using the app:
$...
- 153
1
vote
1
answer
171
views
Create shared folder as active directory would in powershell
With Active Directory I can manually create new users. Every time I do that, I use right click -> Copy on that user, then I modify some things like Name, Surname and SamAccountName. This process ...
- 11
0
votes
0
answers
22
views
How do you do the following ftp server permissions on AWS?
I looked trough the documentation found here. But found the explanation insufficient. I have gotten my head around creating an instance, choosing a Linux distro, installing Apache, getting ftp going ...
- 101
0
votes
1
answer
1k
views
Limit AD user to only login to computer in a specific OU
We have an AD domain (still on-premise) that supports a library, among other things. This library has a number of public computers, and these public computers are in their own OU in Active Directory. ...
- 12.9k
0
votes
0
answers
174
views
Permission denied to home dir and files when logging in from a new laptop
After having issues with my initial login, I've used sudo perms to remove the /home/bwadsworth dir but I still get errors accessing home even though it was just created as part of my login... the only ...
- 1
0
votes
0
answers
71
views
vSphere Datastore and VM Permission
Given a vSphere user has roles that allow it to perform low level file operations on datastore A and attach existing storage on VM (in VMware vSphere), does this allow the user to attach existing ...
- 48
0
votes
1
answer
57
views
Different behavior of SGID in *BSD and Linux
I came across an interesting thing: on BSD systems a new file will have group set to the group of the directory. On System V systems it will have the primary group of the user that created the file.
...
- 1
0
votes
2
answers
64
views
Are there any potential pitfalls to changing the permissions of config files under /etc to a non-root user?
There are various services which are being run on our machines, e.g. cassandra, datadog, etc.
Occasionally, we need to change the configuration, and we wish to automate the propagation of the config ...
0
votes
1
answer
46
views
I'm trying to provide limited access to certain functionality using links, bash scripts and SUID. SUID script does not run with root access
EDIT: this Sticky bit enabled Script can't write to a root file appears to be a similar problem
EDIT: How can I use SetUID on a shell script to run as a non-root user? is very similar as well.
I ...
- 9
-1
votes
1
answer
22
views
How to create a non-modifiable structure of shared folders on NTFS?
I am in the process of finding a suitable solution of the following.
I have a Windows Server 2013 share with a set of shared folders. This share has a central folder (say Shares) and a set of ...
- 1
0
votes
1
answer
67
views
How to set limited permissions using command line on windows?
user want to delete all permissions and keep only modify permission for everyone and full permission to system.
Like this.
But present with icacls command
icacls "%ProgramData%\myfolder\...
- 145
0
votes
1
answer
191
views
Set folder permission by OU
I'm attempting to setup folder permissions on my DC to a shared desktop. I have an OU containing the users I want to allow to view this folder, and a GPO which handles the permissions linked to the OU....
- 13
0
votes
2
answers
34
views
Simple NTFS/permissions q
Say I would like to only allow domain admins write permissions to a folder, and disallow everyone else.
If I set write permissions for domain admins, but then read-only for 'authenticated users', ...
- 212
0
votes
0
answers
157
views
Trying to setup a mail server using dovecot, hitting permission issues alot
I'm following the this tutorial to setup dovecot as a mail server. I've hit a lot of little issues that don't make a whole lot of sense to me - it feels as if dovecot just isn't being given the access ...
- 101
0
votes
0
answers
97
views
Adding a group to a folder structure "basing" on another existing group's rights
thanks for reading this wall of text anyways.
My scenario:
i have a mega-folder called Projects. Every subfolder is a different project. So, for example, i have Projects\N123456 - New Coca Cola.
Now, ...
0
votes
1
answer
183
views
Getting command not found using sudo, but not for running command as root without sudo
wierd issue where if you use sudo command for certain commands it is not found. But runnning it as root user WITHOUT sudo does work
root@ip-172-31-43-153:/home/ubuntu# sudo xfs_growfs -d /
sudo: ...
- 101
0
votes
0
answers
73
views
Cannot edit journald.conf
I'm working with a embedded linux machine that was made with Buildroot. The default user is root and I would like to edit /etc/systemd/journald.conf to set the SystemMaxUse to prevent the log files ...
0
votes
0
answers
225
views
NFS mount using /etc/idmapd.conf has permission denied for mapped user
With an NFS4 mount, using /etc/idmapd.conf to map the nobody user and group to user123, files look like they should be accessible to user123 but instead give a Permission denied. The files are ...
- 101
0
votes
0
answers
245
views
Giving execute permission on folder with ACL makes files executable, too
I have a folder, owned by the "website user" foo, that will host a site:
$ sudo mkdir foo
$ sudo chown -R foo:foo
$ sudo chmod -R u=rwX,g=rX,o= foo
$ sudo chmod -R g+s foo
$ ls -la
drwxr-s--...
- 161
3
votes
2
answers
143
views
How to properly secure user's folders?
On a file server, a base folder contain user's folders:
This base folder is protected against user's actions (deletion, rename, dump of files, etc), users can only read and traverse it:
To ...
- 1,663
1
vote
1
answer
253
views
Rsync makes the destination folder unwritable before copying files to it (and then of course it fails with Permission Denied)
I want to use rsync to deploy a project from my dev machine (Windows 11, CygWin) to a remote server (Ubuntu) through SSH. I've made sure that my SSH user has full write access to the destination ...
- 133
1
vote
0
answers
978
views
'user ... is not allowed to execute .... as root on ... ' - even with SUDO privileges but not sure why?
I am in the processing of installing singularity using the terminal on my Linux Mint computer (Ubuntu).
I have the following command:
sudo apt-get update
The computer then asks me to enter my ...
- 111
0
votes
0
answers
221
views
My samba share does not keep permissions when moving files onto it. What am I missing?
I have a samba server running on a debian host so I can share an specific directory with an ubuntu client machine.
This directory on host has no files on it.
Samba config on host is as follows:
sudo ...
- 9