Questions tagged [file-permissions]

Most current file systems have methods of administering permissions or access rights for specific users and groups of users. These systems control the ability of the users to view or modify the contents of the filesystem.

Permissions on Unix-like systems are managed in three distinct classes. These classes are known as user, group, and others.

Permissions on Windows systems can be granted to users, groups, computers, or other built-in security principals such as SELF or CREATOR OWNER.

Permissions are generally configured in an Access Control List (ACL, pronounced ackle) with each entry in the list being referred to as an Access Control Entry (ACE).

965 questions
3
votes
1 answer

NTFS inheritance issue

I am having permission problems with a folder on Windows Server 2012. At the root of the disk the following permissions are granted: Principal Access Inherited from Applies to Administrators Full control …
Cirris
  • 33
  • 3
3
votes
1 answer

NTFS and Linux Permissions

I have defined a share in samba config, I am looking to modify permissions on a subfolder within MyShare to allow a specific NTFS group named MyFolder_Security modification rights and all other (with exception to root) groups/users read permissions…
VGE IT
  • 71
  • 1
  • 4
3
votes
2 answers

Domain Admin can not take ownership of files

I have a very strange issue where a domain admin can not see the permissions of a file i.e. has no read permissions. This means I can not use takeown or icacls (even running as administrator) to alter permissions and ownership because access is…
Myles Rowley
  • 31
  • 1
  • 1
  • 2
3
votes
1 answer

Shared storage between Virtual Machines

We're planning to set up HA apache servers in our virtual environment. The load balancing between the servers is working fine. The problem we face is the following: We'd like to have one physical storage for all of the apache servers (Thats where…
3
votes
2 answers

What are my options in terms of controlling document management

In REF to Shared network drive with Office and delete permissions disabled leads to not being able to save We have several businesses that are now pushing over 30+ employees and many of these employees come and go. In some cases they delete files…
Jason
  • 3,931
  • 19
  • 66
  • 107
3
votes
1 answer

Windows Server backup D: volume access denied error

The problem: When running a full server backup to NAS share, C: partition is backed up correctly, but at some point during backing up D: partition (around 300 GB out of 490 GB) if fails with access denied for volume D: What I tried: Took ownership…
3
votes
1 answer

Correct Permissions for WWW Data

I keep coming back to perfect web-based permissions, I've done it a few ways. This post isn't as complex as it is a little long, I wanted to provide some samples. I've searched far and wide but I am wondering if there is a de-facto standard. Thank…
JREAM
  • 163
  • 1
  • 1
  • 9
3
votes
2 answers

Nginx - Allow access to folder directory only by referring URL

front-end web developer here. Sorry in advance. My company wants to store new builds of our software on our web server, running Nginx, provided by WP Engine. The file path for these builds would be company.com/downloads/file.zip. We want to restrict…
Jesse Rogers
  • 141
  • 1
  • 1
  • 6
3
votes
2 answers

Linux user without any filesystem permissions

I need to make a linux user for the sole purpose of an SSH proxy. Amongst other things, the user should not be able to go around exploring the filesystem or even access a shell really. Obviously I could just chmod remove all read/write/execute…
3
votes
0 answers

Why can't I see the file version of files in system32 remotely?

Here's the situation: I can RDP into a computer, go to C:\Windows\System32, and check file versions to my heart's content. Such as winlogon.exe, explorer.exe, etc. If I map the drive, and try to check the file version, I can't see it. It's blank.…
3
votes
1 answer

IIS_IUSRS Can Access a File, but Application Pool Identity User Cannot

I am trying to understand IIS file permissions. A given file has "full control" permissions for IIS_IUSRS. But it seems all Application Pool Identity users cannot access the file. (I have noticed that some of my Application Pool Identity users…
3
votes
3 answers

sudo and sudo -i access features

What are privilege differences between sudo and sudo -i? With sudo it's $sudo echo "search foo.bar.baz" >> /etc/resolv.conf bash: /etc/resolv.conf: Permission denied ...and with sudo -i $sudo -i #echo "search foo.bar.baz" >>…
Alex
  • 2,357
  • 5
  • 32
  • 41
3
votes
1 answer

Broken ACLs when "zfs send"ing a snapshot from a Linux machine to Solaris

I'm running ZFS on a Ubuntu machine that hosts our home directories. The pool has the following ACL setting: # zfs get all homes | grep acl homes aclinherit restricted default homes acltype off …
Pavel
  • 1,038
  • 1
  • 11
  • 30
3
votes
1 answer

My event log has corrupted DACL 'Write Attributes' in 4656 file audit events

I have been scripting a procedure in powershell to pull security event logs from my windows 2012r2 server. Investigating a bug in my procedure to parse the event into xml I discovered a very strange problem in the 'Access Reasons' property of the…
3
votes
1 answer

What kind of file and folder permissions are necessary for ODBC?

In our network, we are using an application that connects to an *.mdb access database through ODBC (User DSN). The mdb is based on a subfolder of a share that is locally mapped to W: What kind of minimum permissions do I have to give users on the…
vic
  • 973
  • 1
  • 10
  • 22