Questions tagged [user-permissions]
The user-permissions tag has no usage guidance.
417
questions
1
vote
2
answers
309
views
Shared drive, copy permissions to new accounts to view files in old domain server
Ok this is a bit of a hard scenario.
We are in the middle of a domain migration, we aren't doing it all at once which means gradually we will move users over at a time. This means that we need to be ...
- 11
3
votes
1
answer
3k
views
How can a user traverse directories to a file but hide all other items while traversing subdirectories Windows server 2012
How can a user traverse folders to a file that he has rights to, but not show other files or directories that he doesn't have rights to while traversing all other directories to get to the specified ...
- 41
-1
votes
1
answer
823
views
Best practices for user account audits in Linux machines
What is a good way to audit the user accounts on a Linux machine? I will like to have a list of users, the folders they can access and the process they are running, so I can pinpoint security risks, ...
- 375
2
votes
1
answer
86
views
How can I make a directory completely private from a certain user-group?
I'm running an ubuntu 16.04 web server, with both apache and nginx installed
I need a setup where certain directories (dir y) are inaccessible (no read, write or execute permissions) to a certain ...
- 21
1
vote
0
answers
69
views
How to access a directory under document root with new user
I created a new user clientespc under the new group sftpclientes. I want that user to have only access (read/write) to var/pages/example.com/web/uploads. However I can't do that. I guess that's ...
2
votes
2
answers
6k
views
Can a line in a file in the /etc/sudoers.d directory have multiple users?
I've got the following file setting permissions on my machine:
/etc/sudoers.d/myuser
This has the following contents:
myuser ALL=(myuser) NOPASSWD: ALL
I'd like to add a second user to this list, ...
- 2,739
9
votes
1
answer
24k
views
Scheduled Task in Windows Server 2016, run by non-admin Users
In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps:
Scheduled Task: run under system, execute ...
- 91
-1
votes
1
answer
242
views
visudo + read access to file from non root user
how to access file by visudo from non root user , or other option
for example
when we change user to hdfs
and from user hdfs we want to print the file - file.cfg we get Permission denied
how to ...
- 69
2
votes
0
answers
2k
views
Set a default admin ownership to files and folder in share file server Windows Server 2012
I have a File Server on a Windows Server 2012, with a single share-folder with all departments folders inside. The Domain\Administrator is the owner of the root shared folder. Sometimes when a regular ...
- 67
0
votes
1
answer
693
views
Docker specifying user and group as exec command options
I need to execute some commands from inside a php/php-7.1 container as a special (standard) user and group aka «www-data:www-data» used by php-fpm daemon.
www-data exists as both a user and a group ...
- 111
1
vote
1
answer
602
views
Weird redirection issue on nginx server while directing to index.html
I am trying to deploy a single page application using nginx and here is the configuration below.
server {
listen 24670 default_server;
listen [::]:24670 default_server;
server_name ******...
- 143
2
votes
1
answer
51
views
Owner on CentOS changes to a numeric value after a set time [closed]
I have a CentOS web server that uses Windows Authentication from a 2012 r2 server on the network.
Here is my issue:
When I log on, all directories ls -l shows:
ls -l
drwxr-xr-x. 3 jbailey@...
- 161
0
votes
1
answer
796
views
How to grant full access to a windows drive for a domain user when it became lost
I have a UserAccount: UserAccount123, it is part of the admin group of the local computer.
The computer has Windows 7 Enterprise Installed (64bit) and it is part of a domain.
The user is a user on ...
- 3
0
votes
1
answer
1k
views
What privileges are needed to restart jenkins successfully from the web interface?
I'm having an issue when I try to restart Jenkins using the web interface (either through http(s)://theserver/restart or http(s)://theserver/saferestart) because Jenkins gets stuck on the screen "...
- 1
0
votes
1
answer
1k
views
Which user should run my PHP cron job?
I have a bunch of PHP scripts are run by cron (/etc/crontab) at specific times. The scripts are owned by www-data. However, www-data does not have shell access. In fact, it has "nologin" set as its ...
- 103
0
votes
1
answer
2k
views
Configure group permissions on OpenVPN Access Server
I have a OpenVPN Access Server working for N users. Everyone has access to different networks like 172.16.10.0/24, 172.16.11.0/24 and so on.
Now, I'm trying to restrict the access. Only a couple of ...
- 563
8
votes
1
answer
13k
views
How to give write permissions using setfacl while retaining existing permissions?
I want to give write permission to a specific user on a dir recursively without loosing any existing permissions that the user may have. I believe I can use something like this to give write ...
- 181
0
votes
1
answer
2k
views
Prevent a domain user logging in domain computers locally
So I am managing this domain where the users are mostly our company staff who are allowed to login to the company computers within our domain. This is actually out-of-the-box supported as all users ...
- 121
0
votes
2
answers
98
views
Linux permissions and status code 1
i have problem with linux (ubuntu 16.04) permissions and command execution.
/etc/sudoers file:
Defaults env_reset
Defaults mail_badpass
Defaults secure_path="/usr/local/sbin:/...
1
vote
1
answer
104
views
Permission to connect to network folder
Small company with 5 users running a domain on SBS 2008R2. PCs are all running Windows 10.
We have had folder redirection enabled for several years and recently one of my users (Sandra) was unable ...
- 11
5
votes
2
answers
659
views
file copy using restore privilege
We have a Windows backup package which presents Virtual Machine backedup filesystems as iSCSI mounts. Helpdesk users need to perform restore operations, which is done by copying files from the mounted ...
- 51
0
votes
1
answer
126
views
AD Account must be able to create/reset/enable accounts without having rights to log in to the Domain controller
Regarding AD accounts, I believe(correct me if im wrong) it is possible to create an account which has permission to create, modify and disable/enable acconts and reset passwords without that specific ...
1
vote
2
answers
2k
views
Nginx 403 forbiden with the good rights set on files
I'm trying to use a subfolder for containing web app on my server.
For example :
example.com/netdata ===> Netdata monitoring
example.com/passbolt ====> Password manager
etc ..
For making things ...
- 350
0
votes
2
answers
1k
views
How to manage FTP and CHMOD / CHOWN when working with a freelancer?
Nowdays, when working with a freelancer, I add a new user to Debian, create a ftp access to this user and give that to the freelancer
Problem is that freelancer can access some data I want to keep ...
- 847
0
votes
1
answer
45
views
Different Linux permissions for two users
I have a small problem I can't seem to get it right.
I have user1 and user2 and a folder, but I'd like user1 to have full access and user2 to have read only access..
Checking online and looking at ...
- 68
2
votes
1
answer
262
views
Windows Service run as SYSTEM for AD-users
I created a Windows Service that starts a program in the background and makes sure a webapplication needs no further installation.
When I start this service in the administrator account, the ...
- 144
2
votes
0
answers
3k
views
Logrotation permissions troubles
I think I have a mess with the log files on one of my Ubuntu servers and need advice + recipes on how to repair this. I am seeing lots of errors like these when log rotation occurs:
error: failed to ...
4
votes
1
answer
4k
views
Unable to access organisations's IAM settings in Google Cloud
We recently gained access to the "organisation" feature in Google Cloud. By default, everyone in our organisation had the "project creator" privilege but I decided to lock this down and restrict ...
google-cloud-platform
0
votes
1
answer
624
views
change /etc/group folder location
I'm using docker with ubuntu and I need to mount
/etc/group
/etc/shadow
/etc/gshadow
/etc/passwd
inside an external volume, in order to avoid the password loosing each time I've to rebuild the ...
- 113
1
vote
0
answers
24
views
How to limit access for a user within Windows
I want to allow people to build their Electron apps on a Windows environment. For me to do this, I accept jobs in via SQS and have a listener that runs the build process within a "workspace" folder.
...
- 119
2
votes
1
answer
3k
views
What gives users permisson to log onto Windows Server?
I am relatively new to Windows Server and would like someone to confirm if my understanding of the permissions required for users to logon to a Windows 2008 R2 server on a Windows domain is correct:
...
- 123
1
vote
1
answer
1k
views
Debian - Allow only one user to login from any IP via ssh
I want to configure server so only one user (git) is able to login from any IP address (using key), the other users just from specified IPs.
Currenly my configuration allows to login any user from ...
- 592
0
votes
1
answer
1k
views
Understanding Linux Permissions - Apache with user "apache" [duplicate]
I'm with some problems understanding the Linux Permissions, users/groups.
I'm running a PHP Web Application with Apache. The user running Apache is the linux user "apache".
The folder with the PHP ...
- 181
1
vote
1
answer
751
views
Allow user to add Snap-In in Powershell on Windows Server 2012 RC2
I have a user that is used to run Powershell scripts, triggered by the Windows task scheduler on a Windows 2012RC2 server. The scripts use specific Snap-ins, which are added at the start of the script....
- 349
1
vote
2
answers
9k
views
Read/write permissions for /var/www?
I've got a Debian 8 server running where /var/www is owned by www-data and has the permissions drwxr-xr-x for both, files and subdirectories.
Since I need to upload files via SFTP (public/private key ...
- 113
0
votes
1
answer
304
views
Change permissions (2008 R2) - Do I need to reboot server?
I had to change permissions on a user account in Windows 2008 Server R2.
Do I need to reboot the server for these new permissions to be recognized?
0
votes
0
answers
971
views
WordPress file permissions on CentOS7 requiring sudo
I'm running WordPress on my VPS with CentOS 7 LAMP stack.I've followed this guide to set permissions, i.e. I've run
sudo chown apache:apache -R *
to ensure that my wordpress directory is owned by ...
- 65
0
votes
2
answers
875
views
ACL mask not updated when cp a directory with g=r-x to directory with default:mask::rwx and default:group::rwx
I want to create a directory, in which all files are read/writeable by a specific set of users. This should work for new files/dirs in this directory, as well as for files/dirs copied to this ...
- 11
2
votes
1
answer
63
views
Running OpenOffice as a Daemontools service not picking up the user
My problem is that, when started with Daemontools, files created by OpenOffice (which runs in server mode) are owned by root (and in the root group). When I start the Daemontools 'run' script manually,...
- 155
2
votes
0
answers
116
views
How can I get writes in samba shares to be treated as a specific user for permission purposes?
Use case: I'm trying to set up a single Samba share in a system (A) that should be freely accessible from another system (B) in the same network.
A is running CentOS 7 with Samba 4 daemons.
B runs ...
- 21
0
votes
2
answers
631
views
Which security group in AD to manage domain computers
I want to add another user rights to manage all domain computers.
I created a group in AD called ITAdmin and added myself and this user in it.
Then I added this group to several other groups like :
...
- 155
3
votes
2
answers
520
views
Linux user without any filesystem permissions
I need to make a linux user for the sole purpose of an SSH proxy. Amongst other things, the user should not be able to go around exploring the filesystem or even access a shell really.
Obviously I ...
- 139
0
votes
0
answers
107
views
Windows: add user group to file created by a specific process
In our (mixed) Windows network we have a machine with a shared folder. This shared folder can be accessed by anyone belonging to the group User.
However, in this folder, there are files that are ...
- 101
-1
votes
1
answer
141
views
Are there any consequences of deleting the Full control permission on an user object for Administrators, Domain Admins groups?
I'm trying to create a user in AD which is undeletable, unmodifiable even by Administrators, Domain Admins.
Is there any problem that might occur if I delete the Full control permission on the user ...
- 1
2
votes
1
answer
380
views
Delegate Specific rights to Helpdesk on AD
Domain Controller - Windows Server 2008 R2 standard
I need to delegate only below task to helpdesk id for specific OU i.e
1) Creating User
2) and after creating that user, add them to specific ...
- 1,367
1
vote
1
answer
135
views
Accessing internally stored documents via hyperlinks in Websites on a DMZ server
We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
- 11
1
vote
1
answer
95
views
User specific network IP/Port permissions for Open VPN
We are using Open VPN to give secure access to our remote team to access our EC2 instances hosted on AWS.
Usually we create one open VPN account for each team and give that account to the team. By ...
3
votes
1
answer
450
views
Active Directory permissions dissapears
I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests.
Non of the users are a ...
- 92
0
votes
1
answer
78
views
Query AD for users with create users access rights
My company has requested a list with all the users and groups from AD that have access rights to create users and in which OU's they have these rights.
Is there a way to get a complete list via ...
- 179
0
votes
2
answers
2k
views
Is there a way in Linux where one non root user can check if another non root user is using OpenSSL or not without sudo permission?
Consider this scenario where User-A and User-B are both non-root user are running inside a server.
User-A is running different Program P1 (pid-2814),P2(pid-2815) whereas User-B is running different ...
- 101