Questions tagged [user-permissions]

For questions regarding the appropriate use, settings, and enforcement of user permissions, typically for the purpose of either providing access to shared resources or restricting access to private resources.

Because permissions paradigms can change fairly drastically across operating systems and coding frameworks, setting appropriate permissions for users can be a daunting task that requires a great deal of knowledge about what kinds of access are both safe and necessary for a given task.

Restricting access too much can result in systems that are brittle and frustrating to users. Leaving permissions too open can lead to security and privacy issues. As such, finding the right balance for each application is paramount.

1163 questions
11
votes
2 answers

Is there a library compatible with Hapi for fine-grained ACL / User permissions?

Looking to use HapiJS as our API server. We need fine-grained user permissions, e.g. "User A can edit field B" "User C can view field D" for a given model / resource. Before we start building something I've been looking to see if something like…
Adamski
  • 3,585
  • 5
  • 42
  • 78
11
votes
4 answers

OSError: [Error 1] Operation not permitted

I am trying to run a python script which uses a binary file (xFiles.bin.addr_patched) created by a postlinker. However, I am getting this error. File "abc.py", line 74, in ParseCmd shutil.copy(gOptions.inputX, gWorkingXFile) File…
user1357576
  • 389
  • 2
  • 3
  • 17
10
votes
0 answers

How to fix ' You either need MANAGE_USERS or CREATE_USERS permission to: getting profiles related to user 0' error?

I search lots of to fix this error but I can't get success. So I post question here. This error is mainly in Xioami device. Redmi 5A ,Redmi 5 ,Redmi 6A. I test in Redmi 7A but it is working fine in that. I have error…
10
votes
2 answers

Why does the start() method of MediaRecorder throw an IllegalStateException?

I am trying to record audio but the start() method of MediaRecorder class throws an IllegalStateException. I use the following code: MediaRecorder recorder = new…
ram
  • 271
  • 3
  • 4
  • 9
10
votes
2 answers

Root user inside Composer container

I have a basic question when running running a Composer in a Docker container. Is it OK to run the composer as user root inside the container? I am confusing that the owner of the created files (for example when using composer require) is root. Is…
serghei
  • 3,069
  • 2
  • 30
  • 48
10
votes
4 answers

Reading /dev/cpu/*/msr from userspace: operation not permitted

I am trying to write a simple application that can read msr registers, and am running this application from userspace. I have loaded the msr module and given read permissions for everyone to /dev/cpu/*/msr. But still the user is not able to access…
futureishere
  • 201
  • 2
  • 4
10
votes
3 answers

AngularJS - permission directive

I am trying to write directive that will evaluate user permissions. In case user is not permitted to see given content the content will not be displayed (done, working fine) requests from controllers inside permission directive will not…
klesta
  • 161
  • 1
  • 9
9
votes
5 answers

Vue.js with Laravel Permission

I am in the process of integrating Laravel Permission API with Vue.JS frontend. I am using https://github.com/spatie/laravel-permission library for Laravel Permission. I am not understanding how can I check permission in the Vue JS front End (In…
Kapil Yamakanmardi
  • 133
  • 1
  • 1
  • 6
9
votes
2 answers

Can I assume that nobody is 65534?

I'm writing a setuid root program. This program needs to open a file for writing and then write some content. It needs euid 0 only for opening the file, then it can drop privileges. To drop privileges, I could seteuid to the current uid. But I was…
Likk
  • 747
  • 3
  • 7
  • 8
9
votes
4 answers

Error " You dont have permission to attach files to this post" on Wordpress

When non-admin users upload media, They get the following error: Things i have checked: Wp-content/uploads and all sub folders have permission 755. Core capabilities and custom for a test user ( who gets this error) is set for yes for…
shrbisht
  • 676
  • 3
  • 9
  • 23
9
votes
3 answers

Permission based authorization .net identity

I am new to .NET, MVC & Identity Framework. I noticed the identity framework allows for securing individual controller actions via annotations. [Authorize] public ActionResult Edit(int? Id){ //edit action } I would like to secure certain…
Mike Croteau
  • 1,062
  • 2
  • 16
  • 43
9
votes
3 answers

Best practices for temporarily enabling and disabling a MySQL user account?

I have a MySQL user account that is used (only) as part of the deployment process to make changes to the database (add/drop tables and columns, etc). Because this user account has these high privileges, I want to keep it disabled most of the time,…
Peter
  • 29,498
  • 21
  • 89
  • 122
9
votes
6 answers

SSRS 2008: User Does Not Have Required Permissions

I have already researched the following existing SO questions and the links that they reference: User '' does not have required permissions, SSRS 2008 on Windows 8 Reporting Services permissions on SQL Server R2 SSRS SQL Server Reporting Service -…
AJH
  • 365
  • 1
  • 4
  • 18
9
votes
1 answer

Symfony2 Group permissions with ACL

Where I work we are designing a webapp in which users may belong to multiple groups and each group has access on a set of resources not known in advanced. Plus, users can enter or leave groups and groups can acquire or lose access to resources, so…
mokagio
  • 16,391
  • 3
  • 51
  • 58
9
votes
4 answers

How to know if a given user has read and/or write permissions for a given path

I should start by saying I consider myself a proficient user. But today I had the need to automate this and was stumped. Let's suppose I am root, and as such I'm able to traverse the whole filesystem but I can't run "sudo" nor "su". I have a given…
Eduo
  • 131
  • 1
  • 9
1 2
3
77 78