Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [permissions]

In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

-1
votes
0answers
11 views

Libvirt - adding pool on external drive - no search permission [migrated]

I am running ubuntu 18.04. First off, how can libvirt access /var/lib/libvirt/images when root is the owner and group? Is there another of security letting libvirt access root files in only some ...
0
votes
0answers
15 views

0x80070005 Access is denied - Group Policy - Printers

We've been running into this error across our network: The user 'NameOfPrinter' preference item in the 'NameOfGroupPolicy' Group Policy Object did not apply because it failed with error code '...
0
votes
0answers
15 views

CIFS chown Permission denied on Docker / Kubernetes

I'm trying to set up Paperless(tried with Plex as well) on my Kubernetes cluster. My media is on an Windows share mounted with CIFS on my nodes //data.domain.net/media /mnt/media cifs credentials=/...
1
vote
1answer
20 views

How to prevent PHP on a virtualhost/website from writing to another virtualhost's/website's directory on the same Apache server?

I want to prevent virtualhost #1 from writing or reading to virtualhost #2 without losing writing access to the www-data at all (because the applications need to write to the directory). My current ...
0
votes
0answers
16 views

Display Content From primary.com/account When Visiting secondary.com/account Without Changing URL In Browser [closed]

I am a website developer who uses cPanel's WHM on a VPS running CentOS. I have root access to the server. I have two domains, lets call them primary.com and secondary.com. Each website has it's own ...
1
vote
1answer
15 views

AWS set s3 bucket directory access with policy

I'm trying to create a policy on AWS that allows access to specific folders in an s3 bucket. According to the documentation this can be done with the following policy { "Version": "2012-10-17", ...
0
votes
1answer
16 views

Permissions for a webhook under NGINX

Here is what I have on an Ubuntu Server 16.04 LTS: I'm hosting a static website (build using https://gohugo.io/) on a private github repo I created a Webhook.php on my Webserver that is called by ...
1
vote
1answer
85 views

Setting 'Run-Protect-Admin-Groups-Task' Extended Right

I modified the security settings on the AdminSDHolder object in my domain and takes a very long time to propagate the settings to my admin users. I tried run runProtectAdminGroupsTask manually, but ...
1
vote
1answer
38 views

give apache ID permissions to list and CRUD files as OS users

I wasn't sure if this question belongs here or on SO. I can move it there if needed. In any decent Apache configuration, Apache will run as its own ID; www-data for example. And this ID will not have ...
0
votes
0answers
16 views

Removing Domain Users group from Local Users group best practice

Is there any reason, assuming all users with logon\service\batch access are added to either to the "Local Users" or "Local Administrators" groups, That the "Domain Users" group can't be removed from ...
0
votes
1answer
32 views

Dovecot permission error creating inbox

I have a new Dovecot installation, with dovecot daemon running as root (according to ps). My 10-mail.conf contains mail_location = mbox:/data/mail:INBOX=/data/mail/%d/%n mail_privileged_group = ...
0
votes
1answer
53 views

/var/log/cron.log returning CRON[PID]: Permission denied for domain joined account

I'm trying to get a cron job to run, but not as root. Within the context of the user (domainuser@contoso.com), here are the outputs of the crontab and cron.log: Output of crontab -l # Edit this ...
2
votes
0answers
30 views

Puma + Nginx permission denied on files that don't exist

Getting an error in the nginx logs: [error] 6193#6193: *1 open() "/home/ubuntu/app/assets/bootstrap.min-2e2a039f4eb020ba4438b6e2ad6a83748c14257a60f68facd2d72df75c452969.css" failed (13: Permission ...
0
votes
1answer
32 views

get write, read, execute permission of a folder to a user

In an ubuntu server 18.04, I have 2 users: userA and userB. There is a folder /home/userA/data I am going to get read, write, execute access of data to userB. unfortunately the command chown userB ...
0
votes
0answers
29 views

executing on multiuser screen - permission denied

I have a screen running on root, lets call it foo root@server:~$ screen -S foo it is multiuser ~/.screenrc : multiuser on acladd root acladd www-data I can access it from other user www-data@...
-2
votes
0answers
17 views

Mount drive from another Linux pc

I am curious about this scenario but I lack the items to bring it to life. Let's say I have two Linux computers. Now, I remove the main harddrive from computer B and mount it on computer A in say : /...
0
votes
1answer
17 views

How can I disallow access to a specific ip within a LAN?

My Network topology looks like this: PC1------- PC2-------Switch--------Router-PT PC3-------2960-24 PC4------- What I try to accomplish is: No PC is allowed to ping PC3, but PC3 is allowed to ping ...
0
votes
1answer
44 views

Premissions needed to launch COM as “The launching user” identity?

Solved: added full control over C:\Program Files\Application folder to group containing "The launching user". Using dcomcnfg I can configure a application identity, when launched from another ...
1
vote
2answers
92 views

Azure Container Instance Mount point permissions

I am having some problems with a website that I am running on Azure Container Instances. I've got a wordpress docker image pulling from a private azure container registry, and I'm mounting a file ...
0
votes
0answers
18 views

How to restore apache error file

Somehow one of my apache error files went supernova and reached 6gb. Most programs don't play well with files that big so I figured I'd delete it to start fresh. Problem is new errors aren't showing ...
3
votes
1answer
35 views

Write permission on file is NOT granted when used by postfix

I have to change my working platform from Ubuntu to Centos7. My script is working fine on Ubuntu but not yet on Centos. My script is supposed to update the /tmp/CheckAccessRight.log file, when the ...
1
vote
0answers
55 views

Centos7 Samba can't write subdirectories via GVFS

I have a really strange problem with Samba running on Centos 7. I have some anonymous shares that are writeable by everyone. Usually I access these shares from a) windows pc's that are being ...
1
vote
1answer
66 views

Mounting a cifs share dir_mode and file_mode are being ignored

I have an Ubuntu Server that is trying to mount a Windows Server shared folder. Firstly, what I'm trying to do here is mount the share as the person in the credentials file and all actions take place ...
2
votes
0answers
96 views

Zentyal 3.3 to 5.1 upgrade. Cannot access samba shares from windows

We recently upgraded our Zentyal 3.3 server to 5.1 It was an upgrade process via software updates menu. The samba version were 4.1.3 and now it's 4.6.7 After the upgrade I noticed that nobody can ...
2
votes
0answers
30 views

internal-sftp on chroot jail disconnects with status 1?

Server: Ubuntu 18.04.1 LTS SSHD: OpenSSH_7.6p1 Ubuntu-4, OpenSSL 1.0.2n I have created a test user sftpuser and sftp group to try logging in through a WinSCP client, as a start. In sshd_config I ...
0
votes
0answers
38 views

mount GCPs buckets with write access

I can successfully mount my bucket using the following command sudo mount -t gcsfuse -o rw,noauto,user,implicit_dirs,allow_other fakebucket thebucket/ I can go into the bucket find the subfolders ...
1
vote
2answers
56 views

Creating an S3 Bucket with Only Public Read and Download Permissions

I am trying to setup an S3 Bucket that has public read and download permissions, but not public upload. I have the following permissions in the "Access Control List" And Bucket Policy which allows ...
1
vote
3answers
57 views

Setting recursive permissions: how to increase performance?

We have a huge directory tree, many levels deep and with a (very) large number of small files at each level. From time to time we have large file data changes where parts of the tree are replaced and ...
1
vote
1answer
38 views

Sudo required to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop

I am wondering why I need sudo to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop. Installed kubectl:kubectl, minikube and docker.io on both an Ubuntu Server 18.04 and on an Ubuntu Budgie ...
0
votes
1answer
16 views

I want config.json to be readable by php app, but not via the browser

Forgive me if this is a remedial question. I'm authoring an API for a web app. I've got a config.json file for local configuration, but currently it can be called directly via a web browser if you ...
1
vote
1answer
138 views

NT_STATUS_ACCESS_DENIED listing \* - Samba Server

I'm trying to setup a CentOS 7 samba server but I just can't make some permissions work. All my files and directories are allowed only to their respective owners, e.g: drwxrwx---. 5 root setcob ...
1
vote
0answers
65 views

Running 'cron -f' as an unpriviledged user in docker: /var/run/crond.pid: Permission denied

I want to create a docker container with a node application which runs on a schedule. I'm attempting to have cron running in the foreground in the container and periodically start the application. ...
0
votes
1answer
21 views

Can't view list of sites in IIS

One of our team members can't see the list of web sites in IIS on one of our servers. When he loads IIS he just sees an empty Start Page node. If he right-clicks on the Start Page node, and then on "...
3
votes
1answer
120 views

Trying to deploy Symfony on Ubuntu 18.04 LTS - setfacl not working?

Disclaimer: I already asked this on StackOverflow but it's kind of urgent and I'm getting no responses and I figure ServerFault might be the better place to post this anyways. If I get an answer on ...
1
vote
0answers
40 views

docker-compose fails to spin up a gerrit container due to permission errors

I'm trying to spin up a gerrit workspace on ubuntu following the details provided in the following link. https://gerrit.googlesource.com/docker-gerrit However, this keeps failing only in when trying ...
1
vote
1answer
63 views

Run application on any user sign in/log on with elevated privileges

I am trying to make an application run on any user sign in (or session connection, be it local or remote) having elevated privileges, but without UAC prompt. When new user is added, application should ...
-1
votes
1answer
16 views

Granting privileges for a user doesn't appear to apply even after flushing

I'm working on creating a test system and need to grant a user remote database access. I'm doing this with the following: mysql> SHOW GRANTS for codingo; ERROR 1141 (42000): There is no such grant ...
0
votes
1answer
17 views

How to modify permissions with FileACL wfor two users

I need to apply permissions to files and folders with Fileacl for two users. This is an example of one user: FILEACL "C:\MyDocuments2\Web" /S "%MachineName%\ASPNET":RrRaRepWwAWaWeX /S "CREATOR OWNER"...
0
votes
0answers
36 views

Get-WinEvent: unauthorized errors while filtering by ProviderName

I'm using PowerShell (Get-WinEvent) to get the restarts from a server and I'm getting an unauthorized error only while applying the "ProviderName" filter: $logNames = @("Application","System") $...
1
vote
1answer
28 views

Windows - Restrict ability to run application to one service account

I've been asked to write a script that enters information from one application into another - and I've done it using a combination of Python, Selenium and Firefox (it's a temporary measure before a ...
2
votes
1answer
48 views

How to make UAC ask for username and password every time?

if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices) If i start a ...
1
vote
1answer
128 views

Why can users delete files on Samba share when they apparently don't have permission to do so?

I'm trying to wrap my head around file permissions on a Samba share and the following puzzles me why both user1 and user2 can delete each others files even though they don't seem to have the ...
-3
votes
1answer
54 views

Freebsd shutdown privileges

I need to create a user and deny them permission to turn off the machine. DO SOMEONE KNOW HOW TO CHANGE THE PERMISSIONS OF A NORMAL USER TO NOT ALLOW ME TO TURN OFF?
0
votes
1answer
108 views

ec2 ssh Permission denied (publickey)

Two days ago, I tried to connect to the server with ssh as usual. But I got a connection refused error. I've tried a lot of solutions. As in this youtube video (https://www.youtube.com/watch?v=...
3
votes
3answers
469 views

What is the minimum action required in order to have access to a newly authorized server folder

I hope I'm at the right place (right stack exchange website). If not please tell me the right one. I got new rights on a folder on a Windows server by being added to Active Directory Group for which ...
0
votes
0answers
3 views

How does gnome packagekit handle user permissions?

I've told my Centos 7 server to install some software (tracker-1.10.5-6.el7) via the GUI, which I THINK is the application gnome-packagekit. But ticking the boxes and selecting apply, doesn't seem to ...
0
votes
0answers
4 views

execute permissions in www/html, acls, and files versus directories

for web development, apache2 on debian buster sets acls on /var/www/html > getfacl /var/www/html getfacl: Removing leading '/' from absolute path names # file: var/www/html # owner: www-data # ...
0
votes
1answer
23 views

IIS AD Permissions

We need the ability to run a script to restart the app pool of the specific IIS 7 site (Windows 2008) from a Windows 10 machine. We have a script, however, we need to use a service account to run the ...
0
votes
1answer
39 views

Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016

I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page: -- Reset passwords in a particular Org Unit -- Create ...
0
votes
0answers
16 views

Script to apply permissions to a folder structure and exclude one folder

I need your help to modify this command according to my requirement if that is technically possible. Here is the structure \Server\Parent\UserA\unix \Server\Parent\UserB\unix \Server\Parent\UserC\...