Questions tagged [user-permissions]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
24 views

The rights to move the computers inside the OU without the ability to delete they from the AD

But... How can I do this? Even if I forbid deleting the computer object directly, the user can still delete the unit. If it is possible to prohibit deleting the computer, then we cannot move from ...
0
votes
0answers
24 views

Get list of AD groups a user is a primary owner of

i would like to get list of AD groups a user is a primary owner of. i have gone through this question already. But its not giving me the attribute/property whether the user is a primary owner of ...
2
votes
0answers
25 views

Allow user/group to start/stop/restart windows service

I have 4 services. All of them are run by an individual user. All 4 users are part of a group I created (ServiceWorkers) which has the Log on as a service user rights assigned. Each service needs to ...
0
votes
0answers
8 views

Getting ACL permissions by user

I'm sharing files with other users. But other users are don't know who share files with himself. I mean how can I list ACL permissions by user? Can I do this? I am not talking about listing for a ...
0
votes
1answer
10 views

SMB share, from windows, creates files are owned by administrator and permissions and for Everyone. How to force this to be user who created file?

So I have a smb share setup using unisphere. I can login to my windows machine on the domain and my ad account. I can access the share but when creating a file on the share it shows under security ...
0
votes
0answers
22 views

In a windows domain, if I define the local Administrator group in Restricted Groups, does it remove Domain Admins?

It is my understanding that in a Windows domain, the Domain Admins group is automatically added to the local Administrators group for all domain members. I need to add another domain account to the ...
0
votes
0answers
5 views

User Access revoked willl he be able to access and deploy in kubernetes cluster

i have revoked access for a user from google cloud platform, will he be able to change or deploy anymore on kubernetes cluster? he used to push code to cluster from his laptop. now i have revoked his ...
0
votes
0answers
18 views

User rights somehow not working properly on Ubuntu 16.04

Somehow ubunut 16.04 does not allow me to write to a folder, despite the fact that the user is in the group that has write privileges: $ ll drwxrwxr-x 6 root grafana 4096 Nov 30 17:47 ./ drwxr-xr-x 4 ...
0
votes
1answer
228 views

Running ansible from webserver to manage infrastructure

I have nginx with php app. I have also installed ansible and copied playbooks on this server. What I want to do is run ansible playbooks through webapp. I want to know how to do this safe way. Nginx ...
1
vote
0answers
14 views

AWS organization: What is possible as an admin?

I have a question regarding the possibilities as admin of an organization. The plan is to link an external AWS account of a freelancer to our organization. After some research it turns out that the ...
1
vote
1answer
30 views

Dynamically sharing file/folder between users on the same machine with subdirectory

I have 3000+ local users on my Linux system. I want to set permissions dynamically for folder or files. I came across ACLs (Access Control Lists) when I researched this topic. All users home location ...
0
votes
0answers
34 views

Tomcat file permissions

I have existing version of tomcat7 which installed with default apt-get. which is by default running on its own user "tomcat7" On ubuntu 16. Now I want tomcat9 as well running on same server ...
0
votes
1answer
276 views

Using multiple permit open with Match Groups in sshd_config file in AWS

I have an amazon linux 2 Suppose there is an RDS(oracle) R1, R2 User U1,U2,U3 Group G1,G2 Group G1 has permit open for R1:1521 Group G2 has permit open for R2:1521 U1 is added to Group G1 U2 is added ...
0
votes
1answer
79 views

How to enable file auditing for exchange server V15 folder

So I want to enable auditing on this specific folder V15 located under program files>Microsoft>Exchange server But on the auditing tab I get a Message "you must be an administrator or have ...
0
votes
0answers
24 views

Access network share after autologon with different user account

I´ve got the following problem: The PC I'm talking about is configured with a general autologon user. If the is user logged in, they have the possibility to connect to a network share to access their ...
0
votes
1answer
218 views

Error 1332 while changing folder permissions with cacls

I want to change the user permissions of the folder C:\Program Files\MyProgram so that every user is allowed to write to that folder. I am able to set the corresponding user rights manually within the ...
0
votes
0answers
231 views

ESXi 6.5.0 create user to log in web UI and start a VM

I need to create an user for vmware that: Can access to ESXi Web ui View all the VM with their state Can start a stopped virtual machine (the vm could change). What I'm looking for ? I want to ...
0
votes
0answers
23 views

'mysql_innodb_cluster_metadata' (1044) - Access denied for MySQL router

I am trying to deploy MySQL-router in kubernetes, I had some problems previously and they were fixed. Now mysql-router pod is showing following error in kubernetes logs mysql-router-pod -n mysql-...
0
votes
1answer
120 views

Create user that has SFTP access to everything under vhosts, using Plesk [closed]

I have a Centos 7 server running the latest version of Plesk. I want to create a user called all_sftp that has sftp only access to everything under /var/www/vhosts/ I've made the user, chrooted so ...
0
votes
0answers
15 views

Ubuntu: Pointing an SFTP user to its working directory without listing other user's directory

I am working on configuring an SFTP server on Ubuntu Server 18.04. I want to create SFTP accounts that point directly to their working directory without listing others. For example if the real working ...
0
votes
0answers
166 views

How to grant specific page access in IIS .NET Framework

I am trying to grant access to anyone to a specific page in IIS. I have main folder with the .NET Framework website in C# in this folder I have Web.config file which has <authentication mode="...
1
vote
2answers
23 views

Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?

I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them. I have a couple of windows servers running with a couple ...
2
votes
2answers
124 views

Since 10 years, did I setup my web server wrong? [closed]

Before story: We had a vserver with a domain around year 2004-2007 with apache. My father was owner and I was learning little bit from his friend (he was doing that stuff). I learned how to use linux ...
1
vote
2answers
635 views

Permission issues in cloudSQL SQL Server (GCP)

I see permission error when i tried to shrink files/db in CloudSQL sql server. I know its a managed service and do not have sa user and super privileges. But is there any similar user like sa (or) ...
0
votes
2answers
3k views

Running a PS as a different user

So I am a real newbie at this and could really use some help. In my company we have user accounts and admin accounts set up for those in my department. We are always logged into our normal user ...
1
vote
1answer
251 views

How to create a very limited linux user

I need a user in my linux machine to execute some commands in .bash_profile. But I don't want this user can have access to sftp, ftp and any other protocols. Also any commands can't be executed except ...
1
vote
1answer
25 views

kernel tunables for non privileged user

How can i permit non privileged user to set kernel tunables within specific limit. For instance to let user set hugepages up to 40 sysctl -w vm.nr_hugepages=40
0
votes
1answer
860 views

How to fix permissions on a linux webserver

Short version : i can't upload images using php and i have no idea how to fix the permissions issue Details : I've been using a vps for around three years now I set it up to run Sendy (a little ...
0
votes
1answer
92 views

GCP AppEngine Permissions

I need to grant a GCP project user permissions so he is able to run cron tasks from the app engine console. I've been looking around and could not find suitable permissions for that. Any tip??
2
votes
2answers
3k views

Difference between PGID/PUID and GID/UID when setting up docker containers

I'm new to Docker and I've seen that some scrips for running containerized software require to specify either of those to match certain user and group. So I was wondering what is the difference ...
1
vote
1answer
181 views

Best practices for docker users on a shared machine

We would like to use docker on the servers of our university. From reading https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user I understand that it is ...
0
votes
1answer
193 views

SeBackupPrivilege, but cannot read all files

I am trying to read full directories independent of the current file-permissions. But even though I do have "SeBackupPrivilege", the following code leads to an "UnauthorizedAccessException". How can ...
0
votes
1answer
247 views

Is it possible to disable new bluetooth connections for non-admin accounts(Windows 10)?

I can disable bluetooth entirely, but I want the previously attached bluetooth keyboard & mouse to continue working, but the guest/non-admin users unable to pair new devices. I looked at stopping ...
-1
votes
1answer
307 views

List of active users and their access rights to O.S. in Windows Server 2003 [closed]

How I can get a list of active users and their profiles (access rights) to O.S. in Windows Server 2003 ?
0
votes
1answer
203 views

Which user permissions are needed for accessing (read) operational attributes in openldap

I'm configuring at the moment a openldap server. For defining user permissions I use a ldif file. For checking the permissions and to see if all works like expected I use the Apache Directory Studio. ...
0
votes
1answer
47 views

Folder shared with Full Control, yet is Read-only for client

Server is Win 2008r2, non-domain. Client is Windows 7. User XYZ on client has matching account on server in group Users. Credentials for server account for XYZ are stored in credential manager on ...
0
votes
1answer
139 views

How to manage custom application specific permissions in AD?

We are planning to let our customers of our software configure users and their permissions entirely in Active Directory. Once a AD-user is member of the AD-group "SoftwareXyz" he can log in and use ...
-1
votes
1answer
385 views

Debian 9 give User permission for all folders

How can I give a user permissions for all folders? So /home, /var etc.
1
vote
0answers
116 views

Glusterfs support for user namespaces

I have a gluster volume mounted on a host machine and tried to run a namespaced docker container with a bind mount from the gluster mount on the host. It seems that the user namespacing is not ...
1
vote
1answer
5k views

How to troubleshoot 'permission denied' errors while accessing files in linux?

My question is concerning generic troubleshooting when getting 'permission denied' errors while accessing files as certain user and here is a specific example where I could use some extra help: As a ...
1
vote
2answers
2k views

Modify new user home directory permissions with powershell

I am needing assistance with a script. What I am trying to accomplish is when new users are created in ADUC and their profile path(home folder) is created, it gives the users "Full Control". I am ...
1
vote
0answers
117 views

How to allow AD group to access and manage IIS sites and pools?

i manage actually a domain with around 34 IIS servers running webapplications. I would like to get a better user right management in my domain. For the moment, my users allowed to manage IIS ...
0
votes
1answer
391 views

PHP creates files as root user instead of nginx

I've set up a new server on Debian Stretch. The web server user is nginx: ps aux | grep -E '[a]pache|[h]ttpd|[_]www|[w]ww-data|[n]ginx' | grep -v root | head -1 | cut -d\ -f1 nginx I have already ...
2
votes
1answer
1k views

File Permissions have Question Marks? How did this happen? How to scan for them?

I have a bunch of files that are messing up my backup system (via rsync). The permissions are all question marks. How does this happen? How do I find them / scan for them? This partially breaks my ...
0
votes
1answer
69 views

Setting up proftpd/users for User Perivate Groups

I am using User Private Groups on a CentOS7 server and I can't seem to get things quite working. Firstly the standard users seen to have a mask of 0022 and I am fairly sure it should be 002 for UPG. ...
4
votes
3answers
4k views

How to know if a Active Directory user can log in interactively

I would like to know if and how is it possible to know if an AD user can log in interactively (on a server) in a Windows domain. I need to know if I can find it out using an LDAP search.
0
votes
1answer
108 views

How to remove at job generated by www-data with another Linux user

Script executed by www-data creates an at job. Afterwards, normal Linux user cannot remove this job (atrm) because "Not owner". How can this be achieved?
3
votes
1answer
459 views

Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator can

I am working on Windows Server 2016 (workgroup) and enabled powershell remoting on it. Only the default administrator account can perform tasks that require administrative permission such as Get-...
-1
votes
1answer
1k views

setting umask for a directory so that all directories, executable file(.sh , .cmd, .bat) are 750 and regular file 640

need to create and change existing file and directory such that all directories and executable files(*.sh, *.bat, *.cmd ..) are 750 and regular file are 640 . I need to this in shell and python both. ...
1
vote
1answer
147 views

Sudo required to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop

I am wondering why I need sudo to run Kubernetes on Ubuntu Server, but not on Ubuntu Desktop. Installed kubectl:kubectl, minikube and docker.io on both an Ubuntu Server 18.04 and on an Ubuntu Budgie ...

1
2 3 4 5
8