Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [user-permissions]

The tag has no usage guidance.

4
votes
3answers
530 views

How to know if a Active Directory user can log in interactively

I would like to know if and how is it possible to know if an AD user can log in interactively (on a server) in a Windows domain. I need to know if I can find it out using an LDAP search.
0
votes
1answer
19 views

How to remove at job generated by www-data with another Linux user

Script executed by www-data creates an at job. Afterwards, normal Linux user cannot remove this job (atrm) because "Not owner". How can this be achieved?
0
votes
0answers
23 views

Removing Domain Users group from Local Users group best practice

Is there any reason, assuming all users with logon\service\batch access are added to either to the "Local Users" or "Local Administrators" groups, That the "Domain Users" group can't be removed from ...
3
votes
1answer
107 views

Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator can

I am working on Windows Server 2016 (workgroup) and enabled powershell remoting on it. Only the default administrator account can perform tasks that require administrative permission such as Get-...
-1
votes
1answer
52 views

setting umask for a directory so that all directories, executable file(.sh , .cmd, .bat) are 750 and regular file 640

need to create and change existing file and directory such that all directories and executable files(*.sh, *.bat, *.cmd ..) are 750 and regular file are 640 . I need to this in shell and python both. ...
1
vote
1answer
52 views

Sudo required to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop

I am wondering why I need sudo to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop. Installed kubectl:kubectl, minikube and docker.io on both an Ubuntu Server 18.04 and on an Ubuntu Budgie ...
-3
votes
1answer
59 views

Freebsd shutdown privileges

I need to create a user and deny them permission to turn off the machine. DO SOMEONE KNOW HOW TO CHANGE THE PERMISSIONS OF A NORMAL USER TO NOT ALLOW ME TO TURN OFF?
0
votes
1answer
37 views

PHP 7 FPM checkconf is throwing invalid user: ‘www-data:www-data’, but I'm not using a www-data user

I'm using a different user for my web services. Screw convention. I don't have www-data set in any php config files: $ grep -rnw /etc -e 'www-data' $ But I'm still getting this error: $ ...
0
votes
0answers
34 views

Use default `ubuntu` user to deploy an app or make separate users?

I have a Ruby on Rails app and use Capistrano to deploy it to the server. The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
42 views

Restrict domain admins from joining servers to domain.

I work for a large company that has acquired multiple additional sites over the last 5 years. We're fully integrated these sites into our corporate site. The problem I'm running into now is, most of ...
0
votes
0answers
12 views

Administrator only for Family and Safety in Windows 8.1

I've been tasked with setting time limits on a row of computers used by students running Windows 8.1 that are not part of an Active Directory domain. I tried the Family and Safety feature which ...
0
votes
0answers
23 views

How to remotly validate an installation for a basic user?

We have 10 PC on the network and we don't have ActiveDirectory. Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
0
votes
1answer
232 views

Why does rsync+cron fail with opendir permission denied?

I am trying to make a nightly offsite backup using rsync. There is a folder /media/raid1/backup that is to be uploaded to a different server every night using a cron job running as the user ...
4
votes
3answers
503 views

How can I chown a file to a subuid without sudo

Basically, What is going on here and what am I not understanding? I have a set of subuids for my user. I want to chown a file to specific subuid which is part of this user's allocation ...
1
vote
1answer
855 views

Setting a Windows Non-Interactive User Account

Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user. I would like to set specific Windows domain service accounts as "non-interactive" so ...
1
vote
2answers
712 views

Can I “allow logon locally” for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
0
votes
0answers
36 views

Discovered a “Unix Group\400014” with Full Control over Share Folders. Can't find it in AD

We're using a QNAP NAS in order to host our Shared folders which are accessible to users running Windows 10 workstations on a domain with Windows 2008 R2 servers, as well as some Linux VMs used for ...
1
vote
1answer
185 views

User Group permission for apache website

Apache is running with www-data:www-data I added a user sudo useradd -s /bin/false -d /var/www/dev -m dev and added to www-data group sudo usermod -G www-data --append dev uid=1001(dev) gid=1001(...
-1
votes
2answers
548 views

How to copy user permissions in Windows server 2012 r2?

I have windows server 2012 r2 and two storage drive. lest say A and B. I have created users and given files and folder access in drive A but now it is crashed and now I want to give all the same user ...
0
votes
1answer
2k views

List all users with ALL PRIVILEGES in MySQL

I need to find a way to list all database users that have ALL PRIVILILEGES on *.* (all databases and tables). Additionally, it would be great if it could also list only those with GRANT OPTION. My ...
0
votes
0answers
29 views

AWS - custom deny message

Sometime AWS policies evaluate to an authorization deny message, however, our employees don't always understand the reason why. In that cases, displaying a custom message would help a lot. For ...
0
votes
1answer
277 views

Unable to remove security group from OU advance permission due to inheritance + Active directory 2012

I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory. When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
1answer
551 views

How do I fix OpenShift permission denied error?

I'm try to run OrientDB docker container in OpenShift. I encounter a permissions error when it tries to deploy. I'm using a Mac. This is the error: /orientdb/bin/server.sh: line 114: can't create /...
2
votes
3answers
483 views

How to create superuser in CentOS 7

I am very new to Linux OS (i've started with CentOS 7), so i was wondering if it's possible to create some sort of super user who will have same privileges as root. By that i mean ability to write + ...
0
votes
0answers
33 views

How to assign previleges on a postgres schema to a user?

pg_hba.conf contains: ... host 10.10.10.10 service_db admin md5 ... Executed the following commands: ###CREATE DB ADMIN sudo -u postgres psql -p 5432 -d postgres -c "CREATE USER 'admin' ENCRYPTED ...
0
votes
1answer
180 views

ssh connects okay from command line but from cron using publickey

To rsync (incremental) from remote server (Centos 6.x) to local client (Ubuntu 18.04) I copied the public key I created from client to server to execute rsync without password. ...
1
vote
0answers
56 views

remote access - restrict accessible user accounts depending on client

I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
0
votes
1answer
48 views

Sharing folders revokes user permission

I am currently trying to move files from server A to server B. Server A is currently hosting a website, and server is suppose to host it in the future. Server A has a severe firewall, connection ...
0
votes
0answers
61 views

RD Gateway - restrict user account accessibility on target system by client's IP

I have a situation where I need to allow access to user accounts depending on the client's IP. I'm wondering if that can be realized by the means of a RD Gateway and Identity and Access Management. ...
0
votes
0answers
19 views

RDC - allow account depending on computer of requester

The posts Restrict Remote Desktop access to specific users to specific servers in a domain environment? Restrict RDP Access by IP Address explain well how to restrict access to a computer ...
0
votes
0answers
220 views

Gunicorn Permission denied: '/dev/ttyUSB0'

This is my gunicorn config file, with username specification: $ cat /etc/gunicorn.d/wsgi.work CONFIG = { 'working_dir': '/home/ubuntu/workdir', 'user' : 'ubuntu', 'group' : 'ubuntu', 'args': (...
0
votes
0answers
55 views

java.net.UnknownHostException: ambari

I installed Ambari and executed ambari-server setup. When I was asked to Customize user account for ambari-server daemon, I specified the user ambari. Now I want to start Ambari server: ambari-server ...
-2
votes
1answer
292 views

setup apache www directory for multiple users over sftp [duplicate]

I have standard Ubuntu 16.04 droplet over digitalocean with LAMP stack. By default I have one user with root privileges (for admin use). I access any directory from root through ssh like with ...
0
votes
0answers
35 views

Customize folder permissions for one group member only - Windows Server 2003

We have a folder to which a security group has full permissions. I would like to limit one group member from deleting files from the folder. Whats the best way to do this without removing the user ...
0
votes
1answer
57 views

Domain Users Unable to Access Home Directory Without Sharing Folder

So I run a windows 2012 r2 for a client with 20-30 employees. I have created a home directory for each person as a means to save data onto the server. However, recently new users that are added are ...
0
votes
1answer
127 views

How to set up secure permissions: Multiple Users & Websites / Apache / www-data

I had my own private VPS that my hosting service managed and now I am switching to a cloud server where I have to manage everything myself. I am trying to mimic their secure setup that they had. On my ...
1
vote
2answers
3k views

'/var/lib/mysql/mysql.sock' (13 “Permission denied”) when accessing the socket as non mysql user

I am trying to connect to local mysql server I use for development The server starts fine, but I can not connect to it as a non-root user. [root@somepc ]# mysql -u [someuser] -p[somepass] ERROR ...
0
votes
0answers
354 views

User in network can't use a batch and vbs scripts

I have number of users under the same group with permissions to run a specific batch script that copies a folder from a Network mapped Drive to the user local drive, but for some reason one new ...
1
vote
1answer
43 views

Windows Server 2008 r2 security permissions [closed]

I hope I've selected the correct StackExchange for this question. I have searched google and StackExchange but haven't been able to find an answer to my question with the search queries used. I ...
1
vote
2answers
54 views

Shared drive, copy permissions to new accounts to view files in old domain server

Ok this is a bit of a hard scenario. We are in the middle of a domain migration, we aren't doing it all at once which means gradually we will move users over at a time. This means that we need to be ...
2
votes
1answer
499 views

How can a user traverse directories to a file but hide all other items while traversing subdirectories Windows server 2012

How can a user traverse folders to a file that he has rights to, but not show other files or directories that he doesn't have rights to while traversing all other directories to get to the specified ...
-1
votes
1answer
48 views

Best practices for user account audits in Linux machines

What is a good way to audit the user accounts on a Linux machine? I will like to have a list of users, the folders they can access and the process they are running, so I can pinpoint security risks, ...
2
votes
1answer
43 views

How can I make a directory completely private from a certain user-group?

I'm running an ubuntu 16.04 web server, with both apache and nginx installed I need a setup where certain directories (dir y) are inaccessible (no read, write or execute permissions) to a certain ...
1
vote
0answers
64 views

How to access a directory under document root with new user

I created a new user clientespc under the new group sftpclientes. I want that user to have only access (read/write) to var/pages/example.com/web/uploads. However I can't do that. I guess that's ...
1
vote
2answers
702 views

Can a line in a file in the /etc/sudoers.d directory have multiple users?

I've got the following file setting permissions on my machine: /etc/sudoers.d/myuser This has the following contents: myuser ALL=(myuser) NOPASSWD: ALL I'd like to add a second user to this list, ...
4
votes
0answers
3k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
-1
votes
1answer
55 views

visudo + read access to file from non root user

how to access file by visudo from non root user , or other option for example when we change user to hdfs and from user hdfs we want to print the file - file.cfg we get Permission denied how to ...
2
votes
0answers
574 views

Set a default admin ownership to files and folder in share file server Windows Server 2012

I have a File Server on a Windows Server 2012, with a single share-folder with all departments folders inside. The Domain\Administrator is the owner of the root shared folder. Sometimes when a regular ...
0
votes
1answer
270 views

Docker specifying user and group as exec command options

I need to execute some commands from inside a php/php-7.1 container as a special (standard) user and group aka «www-data:www-data» used by php-fpm daemon. www-data exists as both a user and a group ...
1
vote
1answer
199 views

Weird redirection issue on nginx server while directing to index.html

I am trying to deploy a single page application using nginx and here is the configuration below. server { listen 24670 default_server; listen [::]:24670 default_server; server_name ******...