Questions tagged [user-permissions]

For questions regarding the appropriate use, settings, and enforcement of user permissions, typically for the purpose of either providing access to shared resources or restricting access to private resources.

Because permissions paradigms can change fairly drastically across operating systems and coding frameworks, setting appropriate permissions for users can be a daunting task that requires a great deal of knowledge about what kinds of access are both safe and necessary for a given task.

Restricting access too much can result in systems that are brittle and frustrating to users. Leaving permissions too open can lead to security and privacy issues. As such, finding the right balance for each application is paramount.

1163 questions
21
votes
5 answers

Permissions For Google Cloud SQL Import Using Service Accounts

I've exported MySQL Database following the MySQL Export Guide successfully. Now, I'm trying to import MySQL Database following the MySQL Import Guide. I've checked the permissions for the service_account_email I'm using, and I have allowed both…
20
votes
2 answers

How to find my permissions in a SQL Server database?

I'm a user of a SQL Sever database, and I want to know my access rights / permissions in the database I'm using. What SQL query should I use to do so? Thanks
Nbenz
  • 602
  • 1
  • 9
  • 18
20
votes
1 answer

PostgreSQL - DB user should only be allowed to call functions

Currently I'm using PostgreSQL for my application. Since I am trying to put every SQL that contains a transaction (i.e. insert, update, delete) in a function, I stumbled upon this problem: Is it possible that a database user may only be allowed to…
19
votes
1 answer

How to set permissions in an svn repository?

I created a repository on a network drive with svnadmin create repos. Is there a way to set user permissions to the repository? And if that is the case how can those permissions be set?
Woltan
  • 13,723
  • 15
  • 78
  • 104
18
votes
2 answers

How can I prevent iOS apps from resetting after changing Camera permissions?

Currently, when I change the camera permissions for my app in Settings, then navigate back to my app, the app will force a refresh and I will lose my place in the app. I follow these steps exactly: Open an app that uses the camera permission.…
nickjm
  • 412
  • 1
  • 10
  • 21
18
votes
1 answer

Spring OAuth2 checkUserScopes is not working as expected

First of all, according to Spring doc , if i want to map user roles to scopes, i should use setCheckUserScopes(true) to DefaultOAuth2RequestFactory. So one way to do this, is injecting my own DefaultOAuth2RequestFactory bean, as doc says: The…
17
votes
3 answers

Is there a way of detecting whether a user has already given permission to use navigator.geolocation?

Apart from setting a cookie the first time round, is there a way of detecting whether a user has already given permission for navigator.geolocation to return the lat/long of the browser? If there is, what is it and is it the same across all…
bugmagnet
  • 7,631
  • 8
  • 69
  • 131
15
votes
2 answers

Kubernetes, security context, fsGroup field and default user's group ID running the container

I'm new to Kubernetes and I'm trying to understand some security stuff. My question is about the Group ID (= gid) of the user running the container. I create a Pod using this official example:…
15
votes
2 answers

Limiting Google Apps Script Web app to certain users only

Making a web app that makes changes to certain (Sheets) files on my Google Drive (i.e. user will use the app as me), but I would like to restrict the Web app access only to certain users. When deploying app, I only have the options of making it…
14
votes
3 answers

TF14098 Access Denied Branch in TFS 2013

I've got some developers who shouldn't get Admin access to a team collection or the project so they're not deleting the code. However they need to be able to branch. We recently upgraded to TFS 2013 and VS 2013 for all of our projects and the…
cvocvo
  • 1,586
  • 2
  • 23
  • 38
13
votes
10 answers

cannot drop the view 'XXX' because it does not exist or you do not have permission

We migrated our servers from 2005 to 2014, User is able to delete it in the 2005 server But in 2014 we are getting the error as do not have permission or does not exits We have given to same permissions and even he is a system admin.In our…
13
votes
5 answers

Android M User Permission Error - READ and WRITE

I just started off with android M and I am unable to access the external storage. I get the following error Caused by: java.lang.SecurityException: Permission Denial: reading com.android.providers.media.MediaProvider uri…
Kushal Sharma
  • 5,978
  • 5
  • 25
  • 41
13
votes
2 answers

Better way to represent user roles in a database

Is representing user permissions better in the user table or better in its own permissions table? Permissions in User table Putting permissions in the user table means making a column for each permission in the user table. An advantage is queries…
steampowered
  • 11,809
  • 12
  • 78
  • 98
12
votes
2 answers

Is CouchDB per-user database approach feasible for users with lots of shared data?

I want to implement a webapp - a feed that integrates data from various sources and displays them to users. A user should only be able to see the feed items that he has permissions to read (e.g. because they belong to a project that he is a member…
Tomas Brambora
  • 1,056
  • 8
  • 17
11
votes
1 answer

Spring security Access Control List Billions of rows

Implementing security solution based on spring security framework particularly its acl modules. There are millions of domain objects and some hundreds of users in the application. Using Spring Security Acl module the entry in acl_sid and other…
1
2
3
77 78