Stack Overflow
Stack Overflow

Questions tagged [acl]

An access control list (ACL), with respect to a computer file system, is a list of permissions attached to an object.

An access control list (ACL) specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects. Each entry in a typical ACL specifies a subject and an operation.

When a subject requests an operation on an object in an ACL-based security model the operating system first checks the ACL for an applicable entry to decide whether the requested operation is authorized. A key issue in the definition of any ACL-based security model is determining how access control lists are edited, namely which users and processes are granted ACL-modification access. ACL models may be applied to collections of objects as well as to individual entities within the system hierarchy.

Benefits of ACLs include:

  • easy to implement
  • easy to understand
  • extremely fine-grained: down to the user and the resource

Drawbacks of ACLs include:

  • too fine-grained and thus too hard to manage. The ACL management is on a per-object level
  • not context-aware: ACLs do not take time, location, or other attributes into consideration
  • doesn't scale: ACLs only work on a small set of objects and users.

Other access control models include and which aim to address the shortcomings of .

More information can be found on Wikipedia's definition of access control lists.

2775 questions
7
votes
2 answers

AmazonS3 + KnpGaufretteBundle how to set public acl for a file?

I'm using the KnpGaufretteBundle to store pictures on Amazon S3, I can easily create a file with the following code : public function s3CreatFileAction(Request $request) { $filesystem =…
Ousmane
  • 2,673
  • 3
  • 30
  • 37
7
votes
2 answers

AuthComponent: Difference between allowedActions and allow()?

What is the difference between using AuthComponent::allowedActions and AuthComponent::allow? When I Google, I see the majority of examples and documents using or talking about allow(), but only a few using allowedActions. But they both seem similar…
takabanana
  • 617
  • 1
  • 8
  • 9
7
votes
4 answers

Trouble setting up MSMQ ACL using PowerShell cmdlet

My MSMQ queue gets created by PowerShell DSC engine. I can see queues created. Since DSC engine runs from SYSTEM account, then queue owner also gets set to SYSTEM. When I try to set MSMQ ACL from PowerShell console I constantly get following…
Juris Krumins
  • 91
  • 1
  • 5
7
votes
1 answer

Performant ACL schema for complex application (RDBMS, Graph Database?)

I'm building a rather complex web application with Java / Spring and at least 2 different databases: RDBMS for main data MongoDB for files (via GridFS) and other data CLOBs/JSON/etc. The next step is authorization. Simple role based authorization…
Benjamin M
  • 23,599
  • 32
  • 121
  • 201
7
votes
3 answers

Check if a role is granted for a specific user in Symfony2 ACL

I want to check if a role is granted for a specific user in Symfony2 (not the logged user). I know that I can check it for the logged user by: $securityContext = $this->get('security.context'); if (false === $securityContext->isGranted('VIEW',…
said.seven
  • 71
  • 1
  • 1
  • 4
7
votes
2 answers

How to route traffic (reverse Proxy) with HAProxy based on request body

I am attempting to route the following request to the appropriate servers based on the URL identified in the POST body below. I am hoping to accomplish this via a reverse proxy using HAProxy. E.g. I would like to direct all requests to HAProxy, than…
user3567212
  • 101
  • 1
  • 7
7
votes
3 answers

Group and acl on Spring Security

I want to use Spring Security to manage user, group and permissions. I want to use ACL to secure my domain objects but I can't find a way to assign a group to an acl. For example: I've got users and groups. Each group can have the following…
Jerome Cance
  • 8,103
  • 12
  • 53
  • 106
7
votes
1 answer

SpringSecurity check method parameter

I need to restrict method execution with specific parameters. F.e. some seller can create bill for customer id=1 but can't for customer id=2. Is it possible implement in spring security or I should make check in business logic code?
kolchanov
  • 2,018
  • 2
  • 14
  • 32
7
votes
0 answers

SecurityIdentifier.Translate(typeof(NTaccount)) bugged?

When doing a conversion from a SID to an NTAccount, I use the following code: DirectorySecurity folder_sec = Directory.GetAccessControl("c:\\test", AccessControlSections.All); AuthorizationRuleCollection rules = folder_sec.GetAccessRules(true, true,…
Jordan
  • 221
  • 2
  • 6
7
votes
2 answers

C# - Windows ACL - Applying Inherited Permissions

I've been having problems programatically assigning permissions to Folders / Registry entries. I have managed to assign inheriting permissions using the following code: FileSystemAccessRule rule = new FileSystemAccessRule(LOGON_USER_NAME, …
Tristan
7
votes
2 answers

Symfony2 - Access for Login and Register page for Anonymous only not Users

I have this website with a login form and after I successfully logged in, I am redirected to the index. But when I click the back button, it lets me still view the login form which is not good. I want only the login form to be accessible by…
Christopher Mata
  • 175
  • 1
  • 1
  • 7
7
votes
2 answers

Changing ACL for Google Cloud Storage from Appengine (JAVA)

Is it possible to change the ACLs of Google Cloud Storage objects(or buckets) using the appengine Api? I understand that this can be done using the REST API, but is there support for this in the Files Api in appengine? They can be set when…
Patrick Jackson
  • 18,766
  • 22
  • 81
  • 141
6
votes
4 answers

How do i use the mask field in acl_entry table in Spring Security 3.1?

I use the Spring Security 3.1 ACL implementation. So based on a tutorial i have created a acl databse with the following tables: CREATE TABLE IF NOT EXISTS `acl_class` ( `id` bigint(20) NOT NULL AUTO_INCREMENT, `class` varchar(255) NOT NULL, …
Durin
  • 61
  • 1
  • 2
6
votes
3 answers

How do I change the owner of a folder with Powershell when Get-Acl returns "Access Denied"?

I have a question about Get-Acl in Powershell. I keep getting the error message, "Access to the path is denied". I want to change the owner of the folder to myself and then give myself full permissions to the folder using Powershell. Here's the…
ajh4
  • 81
  • 1
  • 1
  • 6
6
votes
2 answers

How can my C# app test whether the user has "Read" access to a network share?

I work on a thick-client app that often runs into "issues" accessing network shares. Before doing any IO with the server, my app tests whether the share (usually of the form \\server\share$) exists. This works fine for detecting those scenarios in…
flipdoubt
  • 13,897
  • 15
  • 64
  • 96
1 2 3
…
99 100