Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [user-permissions]

The tag has no usage guidance.

0
votes
0answers
16 views

Removing Domain Users group from Local Users group best practice

Is there any reason, assuming all users with logon\service\batch access are added to either to the "Local Users" or "Local Administrators" groups, That the "Domain Users" group can't be removed from ...
3
votes
1answer
86 views

Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator can

I am working on Windows Server 2016 (workgroup) and enabled powershell remoting on it. Only the default administrator account can perform tasks that require administrative permission such as Get-...
-1
votes
1answer
27 views

setting umask for a directory so that all directories, executable file(.sh , .cmd, .bat) are 750 and regular file 640

need to create and change existing file and directory such that all directories and executable files(*.sh, *.bat, *.cmd ..) are 750 and regular file are 640 . I need to this in shell and python both. ...
1
vote
1answer
37 views

Sudo required to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop

I am wondering why I need sudo to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop. Installed kubectl:kubectl, minikube and docker.io on both an Ubuntu Server 18.04 and on an Ubuntu Budgie ...
0
votes
0answers
36 views

Get-WinEvent: unauthorized errors while filtering by ProviderName

I'm using PowerShell (Get-WinEvent) to get the restarts from a server and I'm getting an unauthorized error only while applying the "ProviderName" filter: $logNames = @("Application","System") $...
-3
votes
1answer
54 views

Freebsd shutdown privileges

I need to create a user and deny them permission to turn off the machine. DO SOMEONE KNOW HOW TO CHANGE THE PERMISSIONS OF A NORMAL USER TO NOT ALLOW ME TO TURN OFF?
0
votes
1answer
19 views

PHP 7 FPM checkconf is throwing invalid user: ‘www-data:www-data’, but I'm not using a www-data user

I'm using a different user for my web services. Screw convention. I don't have www-data set in any php config files: $ grep -rnw /etc -e 'www-data' $ But I'm still getting this error: $ ...
0
votes
0answers
33 views

Use default `ubuntu` user to deploy an app or make separate users?

I have a Ruby on Rails app and use Capistrano to deploy it to the server. The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
35 views

Restrict domain admins from joining servers to domain.

I work for a large company that has acquired multiple additional sites over the last 5 years. We're fully integrated these sites into our corporate site. The problem I'm running into now is, most of ...
0
votes
0answers
12 views

Administrator only for Family and Safety in Windows 8.1

I've been tasked with setting time limits on a row of computers used by students running Windows 8.1 that are not part of an Active Directory domain. I tried the Family and Safety feature which ...
0
votes
0answers
23 views

How to remotly validate an installation for a basic user?

We have 10 PC on the network and we don't have ActiveDirectory. Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
0
votes
1answer
147 views

Why does rsync+cron fail with opendir permission denied?

I am trying to make a nightly offsite backup using rsync. There is a folder /media/raid1/backup that is to be uploaded to a different server every night using a cron job running as the user ...
4
votes
3answers
388 views

How can I chown a file to a subuid without sudo

Basically, What is going on here and what am I not understanding? I have a set of subuids for my user. I want to chown a file to specific subuid which is part of this user's allocation ...
1
vote
1answer
527 views

Setting a Windows Non-Interactive User Account

Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user. I would like to set specific Windows domain service accounts as "non-interactive" so ...
1
vote
2answers
447 views

Can I “allow logon locally” for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
0
votes
0answers
40 views

Problems Accessing Windows Security Log

I am currently having trouble accessing the Windows Security EventLog. Here is what I did: wrote myself a little TestApp in C# which tests most granular which parts of the log I am allowed to read ...
0
votes
0answers
36 views

Discovered a “Unix Group\400014” with Full Control over Share Folders. Can't find it in AD

We're using a QNAP NAS in order to host our Shared folders which are accessible to users running Windows 10 workstations on a domain with Windows 2008 R2 servers, as well as some Linux VMs used for ...
1
vote
1answer
137 views

User Group permission for apache website

Apache is running with www-data:www-data I added a user sudo useradd -s /bin/false -d /var/www/dev -m dev and added to www-data group sudo usermod -G www-data --append dev uid=1001(dev) gid=1001(...
-1
votes
2answers
366 views

How to copy user permissions in Windows server 2012 r2?

I have windows server 2012 r2 and two storage drive. lest say A and B. I have created users and given files and folder access in drive A but now it is crashed and now I want to give all the same user ...
0
votes
1answer
2k views

List all users with ALL PRIVILEGES in MySQL

I need to find a way to list all database users that have ALL PRIVILILEGES on *.* (all databases and tables). Additionally, it would be great if it could also list only those with GRANT OPTION. My ...
0
votes
0answers
26 views

AWS - custom deny message

Sometime AWS policies evaluate to an authorization deny message, however, our employees don't always understand the reason why. In that cases, displaying a custom message would help a lot. For ...
0
votes
1answer
249 views

Unable to remove security group from OU advance permission due to inheritance + Active directory 2012

I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory. When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
1answer
342 views

How do I fix OpenShift permission denied error?

I'm try to run OrientDB docker container in OpenShift. I encounter a permissions error when it tries to deploy. I'm using a Mac. This is the error: /orientdb/bin/server.sh: line 114: can't create /...
2
votes
3answers
433 views

How to create superuser in CentOS 7

I am very new to Linux OS (i've started with CentOS 7), so i was wondering if it's possible to create some sort of super user who will have same privileges as root. By that i mean ability to write + ...
0
votes
0answers
32 views

How to assign previleges on a postgres schema to a user?

pg_hba.conf contains: ... host 10.10.10.10 service_db admin md5 ... Executed the following commands: ###CREATE DB ADMIN sudo -u postgres psql -p 5432 -d postgres -c "CREATE USER 'admin' ENCRYPTED ...
0
votes
1answer
112 views

ssh connects okay from command line but from cron using publickey

To rsync (incremental) from remote server (Centos 6.x) to local client (Ubuntu 18.04) I copied the public key I created from client to server to execute rsync without password. ...
1
vote
0answers
55 views

remote access - restrict accessible user accounts depending on client

I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
0
votes
1answer
46 views

Sharing folders revokes user permission

I am currently trying to move files from server A to server B. Server A is currently hosting a website, and server is suppose to host it in the future. Server A has a severe firewall, connection ...
0
votes
0answers
57 views

RD Gateway - restrict user account accessibility on target system by client's IP

I have a situation where I need to allow access to user accounts depending on the client's IP. I'm wondering if that can be realized by the means of a RD Gateway and Identity and Access Management. ...
0
votes
0answers
19 views

RDC - allow account depending on computer of requester

The posts Restrict Remote Desktop access to specific users to specific servers in a domain environment? Restrict RDP Access by IP Address explain well how to restrict access to a computer ...
0
votes
0answers
202 views

Gunicorn Permission denied: '/dev/ttyUSB0'

This is my gunicorn config file, with username specification: $ cat /etc/gunicorn.d/wsgi.work CONFIG = { 'working_dir': '/home/ubuntu/workdir', 'user' : 'ubuntu', 'group' : 'ubuntu', 'args': (...
0
votes
0answers
52 views

java.net.UnknownHostException: ambari

I installed Ambari and executed ambari-server setup. When I was asked to Customize user account for ambari-server daemon, I specified the user ambari. Now I want to start Ambari server: ambari-server ...
-2
votes
1answer
240 views

setup apache www directory for multiple users over sftp [duplicate]

I have standard Ubuntu 16.04 droplet over digitalocean with LAMP stack. By default I have one user with root privileges (for admin use). I access any directory from root through ssh like with ...
0
votes
0answers
35 views

Customize folder permissions for one group member only - Windows Server 2003

We have a folder to which a security group has full permissions. I would like to limit one group member from deleting files from the folder. Whats the best way to do this without removing the user ...
0
votes
1answer
46 views

Domain Users Unable to Access Home Directory Without Sharing Folder

So I run a windows 2012 r2 for a client with 20-30 employees. I have created a home directory for each person as a means to save data onto the server. However, recently new users that are added are ...
0
votes
1answer
104 views

How to set up secure permissions: Multiple Users & Websites / Apache / www-data

I had my own private VPS that my hosting service managed and now I am switching to a cloud server where I have to manage everything myself. I am trying to mimic their secure setup that they had. On my ...
1
vote
2answers
2k views

'/var/lib/mysql/mysql.sock' (13 “Permission denied”) when accessing the socket as non mysql user

I am trying to connect to local mysql server I use for development The server starts fine, but I can not connect to it as a non-root user. [root@somepc ]# mysql -u [someuser] -p[somepass] ERROR ...
0
votes
0answers
342 views

User in network can't use a batch and vbs scripts

I have number of users under the same group with permissions to run a specific batch script that copies a folder from a Network mapped Drive to the user local drive, but for some reason one new ...
1
vote
1answer
40 views

Windows Server 2008 r2 security permissions [closed]

I hope I've selected the correct StackExchange for this question. I have searched google and StackExchange but haven't been able to find an answer to my question with the search queries used. I ...
1
vote
2answers
51 views

Shared drive, copy permissions to new accounts to view files in old domain server

Ok this is a bit of a hard scenario. We are in the middle of a domain migration, we aren't doing it all at once which means gradually we will move users over at a time. This means that we need to be ...
2
votes
1answer
337 views

How can a user traverse directories to a file but hide all other items while traversing subdirectories Windows server 2012

How can a user traverse folders to a file that he has rights to, but not show other files or directories that he doesn't have rights to while traversing all other directories to get to the specified ...
-1
votes
1answer
46 views

Best practices for user account audits in Linux machines

What is a good way to audit the user accounts on a Linux machine? I will like to have a list of users, the folders they can access and the process they are running, so I can pinpoint security risks, ...
2
votes
1answer
43 views

How can I make a directory completely private from a certain user-group?

I'm running an ubuntu 16.04 web server, with both apache and nginx installed I need a setup where certain directories (dir y) are inaccessible (no read, write or execute permissions) to a certain ...
1
vote
0answers
62 views

How to access a directory under document root with new user

I created a new user clientespc under the new group sftpclientes. I want that user to have only access (read/write) to var/pages/example.com/web/uploads. However I can't do that. I guess that's ...
1
vote
2answers
632 views

Can a line in a file in the /etc/sudoers.d directory have multiple users?

I've got the following file setting permissions on my machine: /etc/sudoers.d/myuser This has the following contents: myuser ALL=(myuser) NOPASSWD: ALL I'd like to add a second user to this list, ...
3
votes
0answers
3k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
-1
votes
1answer
48 views

visudo + read access to file from non root user

how to access file by visudo from non root user , or other option for example when we change user to hdfs and from user hdfs we want to print the file - file.cfg we get Permission denied how to ...
2
votes
0answers
518 views

Set a default admin ownership to files and folder in share file server Windows Server 2012

I have a File Server on a Windows Server 2012, with a single share-folder with all departments folders inside. The Domain\Administrator is the owner of the root shared folder. Sometimes when a regular ...
0
votes
1answer
214 views

Docker specifying user and group as exec command options

I need to execute some commands from inside a php/php-7.1 container as a special (standard) user and group aka «www-data:www-data» used by php-fpm daemon. www-data exists as both a user and a group ...
1
vote
1answer
189 views

Weird redirection issue on nginx server while directing to index.html

I am trying to deploy a single page application using nginx and here is the configuration below. server { listen 24670 default_server; listen [::]:24670 default_server; server_name ******...