Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [permissions]

In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

0
votes
1answer
63 views

Set permissions to a program instead of a user

I am wondering if I can set permissions to allow a program (I am writing) to access a file (. mdb file on a shared network drive), but the user who is running this program does not have permissions to ...
-3
votes
0answers
48 views

take ownership of file under C:\Windows

I am trying to rename the ActionCenter.dll via our software deployment software. In order to do that I have to take ownership of the file. By default it is owned by TrustedInstaller The software runs ...
0
votes
0answers
9 views

Permission of files written by Word under Wine [migrated]

When I run Microsoft Office 2010 under Wine 3.0 (in Ubuntu Bionic), every .doc or .docx file written by Word gets executable permission. It does not matter if the file existed before or nor. My ...
0
votes
0answers
33 views

Can you disable su for certain users logged in via ssh?

Basically, I'm running a Mac Mini as a server, and I'm trying to close some security holes. My server has 3 users: admin, git, and server. Each user has public key authentication enabled, while only ...
0
votes
0answers
8 views

Samba4: ACLs inheritance: owner group will be changed to “domain users” in new created files/dirs

Samba Version 4.3.11 on Ubuntu Xenial server (16.04) In smb.conf I have: Server role: ROLE_DOMAIN_MEMBER [global] ... inherit permissions = Yes inherit acls = Yes # I needed this due to ...
0
votes
0answers
121 views

Linux: add an sftp user who can only access a web root subdirectory (not their home folder)

I see a lot of instructions on how to create an SFTP user and jail them to the /home/username directory. However, I want an SFTP user to only access a directory like this: /var/www/html/website.com/...
0
votes
0answers
17 views

Moodle (elearning) update with no access to rewrite files

SHORT VERSION: I need to keep bitnami user permissions on files on the first screenshot and add the write permissions to user daemon. LONG VERSION: Hi, I'm trying to update Moodle elearning system's ...
0
votes
0answers
10 views

Permissions required for MSStorageDriver_FailurePredictStatus in check_wmi_plus.pl

I've been trying to configure S.M.A.R.T monitoring for one of my computers through the checksmart command in the check_wmi_plus.pl plugin for Nagios XI. I've followed Nagios XI's guide for creating ...
0
votes
1answer
34 views

Write permission error in /tmp in python call to MySQL on Centos 7

I have a python (3.6 anaconda distribution) scrip on Centos 7 which at some point executes a simple query of the following structure import MySQLdb cursor = cnn.cursor() # cnn is the open ...
0
votes
1answer
28 views

Zabbix Agent unable to read /var/log/messages

So I am trying to monitor the logs of a VM running Centos 7. Specifically the one giving problems is /var/log/messages. I have changed both the group ownership of the file ( made the pertaining change ...
0
votes
0answers
28 views

How to allow nginx to write to a folder owned not by www-data

On Debian 8: I used "ChrootDirectory" to jail a user fileuploader to upload files to /var/www/public now the uploaded files and folders have the ownership fileuploader:fileuploader. Now I serve these ...
2
votes
0answers
91 views

Windows server 2016 {Access Denied} A process has requested access to an object, but has not been granted those access rights

I'm running some selenium c# chrome driver test with the latest version of chrome driver and chrome. On my desktop Windows 10 PC it works fine, however, in production Windows server 2016 I'm getting ...
0
votes
1answer
79 views

NFS mount Permission denied

I created a user and a group with the same uid and gid on the NFS server and the NFS client side. The export on the server side looks like this: /volume1/nextcloud *(rw,async,no_wdelay,...
0
votes
0answers
22 views

Let www-data run an expect script that runs a program requiring root

Confusing subject elaborated: I have a SoftEther VPN server and have developed an expect script to automate account usage reporting, etc. This is run via a script called query.sh with shebang #!/bin/...
0
votes
1answer
76 views

Restart or reload Apache as “www-data” user

I have a webhook script written in Python on my Debian/Apache2.4 server, so that it runs a deploy .sh script when pushing on GitHub. So, the script is executed by standard Apache user "www-data". My ...
1
vote
1answer
49 views

write permissions in mounted dir to apache user

Sorry for maybe silly/basic question... I have directory /var/www/html/logs. From /var to html owner:group is root:root and permissions are drwxr-xr-x. But "logs" dir has apache:apache and drwxrwxr--....
0
votes
0answers
26 views

AWS - custom deny message

Sometime AWS policies evaluate to an authorization deny message, however, our employees don't always understand the reason why. In that cases, displaying a custom message would help a lot. For ...
0
votes
1answer
14 views

How to make the users of a Custom Group see the folders and files inside a folder, and not be able to open the files?

I need to give permissions to a Custom Group in Active Directory in such a way that the users of that group are able to see the folders and files that are present in the folder, but are not able to ...
0
votes
1answer
42 views

How do I fix OpenShift permission denied error?

I'm try to run OrientDB docker container in OpenShift. I encounter a permissions error when it tries to deploy. I'm using a Mac. This is the error: /orientdb/bin/server.sh: line 114: can't create /...
0
votes
0answers
14 views

Securing files in non-web location accessed via symlink

So I have a PHP application. The permissions are set to appropriate ones for www-data user and group. The problem is that I have files being generated by another server process (a java process) ...
0
votes
0answers
64 views

How to allow standard, non-admin, Active Directory users access to Docker without making them sudoers?

I have a compute server with users that authenticate over AD. I want these users to be able to use Docker without making them sudoers. The official advice is to add users to the docker group, as "[w]...
-2
votes
1answer
34 views

Protecting The Design Of A Word Template [closed]

Background I've designed a word template for a customer. It has a large number of nested quick parts that speed up his document creation process. He is concerned that some of his employees may take ...
0
votes
0answers
11 views

Asian input languages inaccessible to non-administrative users on Windows 2012 R2

We have several 2012 R2 machines, some of which are part of a domain while others are standalone. On all of them we encounter an issue where certain Asian input languages (such as Japanese, Chinese (...
1
vote
0answers
50 views

Proftpd cant create folder

Wanted: Create folder and upload file with www-data:www-data user Current Try: Create folder, upload file with ftp:nogroup and filezilla Result: Even with ftp:nogroup can upload file but cant create ...
0
votes
0answers
26 views

GPO and permissions. Failed to create or update new policies

Some time ago I "inherited" control over a 2012 server and its attached domain. We then upgraded to a new server (2012 R2) and configured it as a new DC so they coexisted for a while. Problems have ...
0
votes
1answer
60 views

Authbind Permission Error when binding socket to port

I’m running a Jupyter Notebook server on my Mac, and I’m trying to use authbind to run the notebook server on port 443. I’ve created the file /etc/authbind/byport/443, changed the ownership to the ...
0
votes
1answer
77 views

Restricting RW access to NFS shares

I have the a Qumulo storage system which just creates an NFS mount that our Linux clients can mount and access. In our Environment we have our Linux servers configured to authenticate with AD via ...
1
vote
1answer
41 views

Wifi Permissions per User

I was sitting here thinking about Wifi, permissions and file access. I wanted to know if there's a way to setup individual user and passwords on wifi sort of the same way you do on a windows server ...
0
votes
0answers
33 views

Backups failing due to access problems

We're using Veritas Backup Exec 16.0 to run backups of our servers. We've upgraded from Backup Exec 2010 and have been firefighting problems since then trying to get the schedules to run smoothly. ...
1
vote
1answer
116 views

AWS Permissions for Cross-Account DNS Association

Summary: I've got permissions issues associating a private DNS Hosted Zone across accounts in the same AWS region I have two AWS accounts, and in each I've created a VPC and servers etc. The first ...
0
votes
0answers
41 views

auditctl doesn't stores reads

So I have this rule on auditctl: -w /home/ec2-user/myfile -p rwa -k key-name But when I run ausearch -f /home/ec2-user/myfile or check the logs in /var/log/audit/audit.log, I can't see any ...
1
vote
1answer
22 views

Minimal permission for restoring *some* databases on SQL Server 2012

I am trying to create a set of permissions where an SQL login can create backups of all databases, but only restore the backups on the TEST databases. Another login should be used for restoring to ...
1
vote
1answer
76 views

Query AD users and security groups permission

What are the basic permissions I would need to query AD users and security groups permission. I have a 3th party application that needs AD read privileges. This is for a privileged account management ...
1
vote
3answers
148 views

Access a linux server without being on the sudoers file

I have my Jenkins installed on a windows server and I have created a Jenkins user on the server now I need to push the WAR files to my Linux server to a particular user root (myrootuser) who is there ...
0
votes
0answers
9 views

Automate Deployment For Node.js Apps With Git Hooks but need permission for npm i?

Hopefully I am not posting in the wrong area because I think this is more of permission instead of coding part which I am not sure how to setup the permission properly. (If I am posting in the wrong ...
0
votes
1answer
35 views

Administrator access over CIFS doesn't give access / does not map to Administrators group

I'm trying to access a share using user Administrator while the ACL contains Administrators (the group). The permissions on the share are Administrator: Full Control. (This is Windows 2016) The ...
0
votes
1answer
51 views

Setting folder to have fixed user and group

Years ago I signed up for a VPS that had a custom CMS for setting up new virtual hosts. One of the features I really liked was when a new host was created it set up a new folder with a new user for ...
0
votes
0answers
122 views

Login/permissions problems after installing Kerberos client

Login/permissions problems after installing Kerberos client After setting up a kerberos server (on a separate machine) and installing kerberos client on Ubuntu 16.04 desktop (and laptop), I have ...
4
votes
0answers
72 views

Why are WSUS shared folders shared out to entire network?

I set up a Server 2012 R2 instance as a WSUS server and went through initial set up. But now, from another computer on LAN, when I type explore to the server via UNC path I see Wsuscontent and ...
0
votes
2answers
59 views

New AD User Issues

I apologise for the vague title of this question, but I'm not sure the appropriate wording. Here's my issues with the new user/computer; Can't Remote Desktop to any Domain users on new PC (Though I ...
1
vote
1answer
56 views

mount + verify disk status + disk isnt read/write

Friends and colleagues, We check the sdb disk to see if this is rw but we get "ew", what is the meaning of that? mount | grep sdb /dev/sdb on /montoptree/sdb type ext4 (ew,noatime, data=ordered) I ...
0
votes
1answer
364 views

Kubernetes ConfigMap only writable by root

I'm using ConfigMap to expose a php file intended to be shared across pods and writable by the www-data (Apache) user. ConfigMap apiVersion: v1 kind: ConfigMap metadata: name: magento-config data: ...
1
vote
1answer
69 views

How to allow security group members to manage other group membership in Active Directory

I have a service user (normal user in Active Directory) called user1 used by our custom application to manage some aspects of Active Directory used in the company. I've created a Security group ...
-3
votes
1answer
33 views

CHMOD file and directory permissions changing back [closed]

I have a website and I am trying to link an image stored in a directory, however when I change the file permissions to 775 they change back to 644 and the image isn't displaying. It is showing a Error ...
0
votes
0answers
44 views

Users bypassing network share permissions rules by creating folders

My organization has several network shares, and permissions to all folders are strictly through security groups. Users are not to be added individually to folders. Despite this, we come across folders ...
0
votes
3answers
76 views

Linux: How to optimally configure data partition on multi user system (including LDAP users)?

How to set up a linux computer such that every user having either a local or a LDAP account can use the same data partition. I would need the following behaviour: Every user can 1. create a folder /...
0
votes
0answers
204 views

How do I run Register-ScheduledJob from a script running as SYSTEM?

I'm trying to run Register-ScheduledJob from a script executing as SYSTEM (from an external deployment tool), but I get an error. This must be initially invoked as SYSTEM due to the way the deployment ...
0
votes
1answer
313 views

Permissions for creating OAuth credentials in Google Cloud

Using IAM, I am trying to allow certain users to access API's and allow them to create OAuth client credentials. Is there a predefined role for allowing this? I don't want to use the role of project ...
0
votes
0answers
39 views

SELinux allow process to execute binary

I have the Bacula backup system running and SELinux is interfering. The problem arises when Bacula runs a script that invokes /usr/bin/hostname before one of the backups. 12-Apr 00:05 dir_backup ...
0
votes
1answer
44 views

Best way to share data between partners using NAS

Our company has a need to share data with some partners we have and while discussing how to best implement this we decided we would make guest user accounts on our Linux (ubuntu) fileserver where our ...