How to grant shutdown permission
Hello,
I have created two others account apart from the root account on my solaris 10 machine. Later i' ve realized that the simple accounts don't have right to shutdown the machine unless you switch to the root account.
So which permission should i give to the non-root account to be able to shutdown the system.
Thanks in advance
Built In - Role Based Access control http://docs.sun.com
Open Source - Sudo
Commercial - Symark.com
If it's a laptop use the power button but not from JDS!
alan
Similar Messages
-
Granting "shutdown" permission
For the past several hours, I have scoured the internet searching for an answer to what I thought would be a very simple question. Perhaps it is still a very simple procedure ... I am just at my wits end, though, as to how to do this.
What I want is for a "normal" user to be able to shutdown the system. I am running Solaris 10 on x86. I have tried the following:
Creating a new group, adding the users to this new group, and giving the group execute permission on /usr/sbin/shutdown. Did not work. I get the message "only the user root has permission to ... blah blah blah"
Then I tried usermod with the following parameters:
usermod -A solaris.system.shutdown [username]
didn't work.
I also made sure to newgrp [shutdown_group] before executing the shutdown command. Didn't work. (Did this after I added my users to the new shutdown group)
I have also created new roles (using the roleadd command) - didn't work. I have tried granting "All" permission and roles. I have tried granting "System Admin" permission. All to no avail. I have tried combinations of all of the above; I've tried all of them a second time and rebooted after each and every attempt thinking that maybe - just maybe - all I needed was a simple reboot. This was at 12:00 this afternoon. It's now 6:00.
Regardless of everything that I have tried, I continuously get the error message, "only user root has permission to execute /usr/sbin/shutdown"
What simple thing am I missing? Any help would be greatly appreciated.
Thanks,
CalebNew to Solaris and I have the same problem. What did you mean by:
For the past several hours, I have scoured the internet searching for an answer to what I thought would be a very simple question. Perhaps it is still a very simple procedure ... I am just at my wits end, though, as to how to do this.
What I want is for a "normal" user to be able to shutdown the system. I am running Solaris 10 on x86. I have tried the following:
Creating a new group, adding the users to this new group, and giving the group execute permission on /usr/sbin/shutdown. Did not work. I get the message "only the user root has permission to ... blah blah blah"
Then I tried usermod with the following parameters:
usermod -A solaris.system.shutdown [username]
didn't work.
I also made sure to newgrp [shutdown_group] before executing the shutdown command. Didn't work. (Did this after I added my users to the new shutdown group)
I have also created new roles (using the roleadd command) - didn't work. I have tried granting "All" permission and roles. I have tried granting "System Admin" permission. All to no avail. I have tried combinations of all of the above; I've tried all of them a second time and rebooted after each and every attempt thinking that maybe - just maybe - all I needed was a simple reboot. This was at 12:00 this afternoon. It's now 6:00.
Regardless of everything that I have tried, I continuously get the error message, "only user root has permission to execute /usr/sbin/shutdown"
What simple thing am I missing? Any help would be greatly appreciated.
Thanks,
Caleb
Navy_Coder
Posts:2,097
Registered: 4/29/06 Re: Granting "shutdown" permission
May 21, 2007 12:27 AM (reply 1 of 1) (In reply to original post )
DOH! A few beers later I figured out my problem ...... in the prof_attr file ... there are THREE colons ...
I knew it was something stupid. Sorry for the wasted space ...
Posts:2,097
Registered: 4/29/06 Re: Granting "shutdown" permission
May 21, 2007 12:27 AM (reply 1 of 1) (In reply to original post )
DOH! A few beers later I figured out my problem ...... in the prof_attr file ... there are THREE colons ...
I knew it was something stupid. Sorry for the wasted space ... -
How to grant user permission to create "Credential" and "Proxies"
Hi Team,
Kindly let me know how to grant permission for user to create "Credential" and "Proxies" on server:
Thanks in advance
SantoshCan I revoke this permissions once I grant?
You can use DROP and REVOKE commands to do the opposite.
USE [msdb]
GO
ALTER ROLE [SQLAgentOperatorRole] DROP MEMBER [TestLogin1]
GO
USE [msdb]
GO
ALTER ROLE [SQLAgentReaderRole] DROP MEMBER [TestLogin1]
GO
USE [msdb]
GO
ALTER ROLE [SQLAgentUserRole] DROP MEMBER [TestLogin1]
GO
use [master]
GO
REVOKE ALTER ANY CREDENTIAL TO [TestLogin1] AS [sa]
GO
Cheers,
Vaibhav Chaudhari
[MCTS],
[MCP] -
SSRS How to grant BROWSE permission for reports for all the application users?
Hello,
Problem Statement
I need to allow all of my application users to browse the SSRS reports via logging onto the Report Manager and to some other I even want them to use Report Builder to modify & upload the report.
How could I achieve this.
Environment & Current implementation
We use SQL Server 2012 reporting services.
Custom authentication has been implemented using IAuthenticationExtension Interface. For more details, please refer
this msdn link.
Currently, for each new user created in the application, the admin has to manually give BROWSER role to the username to enable that newly created user to browse the reports.
Is there any way in which we can give "everyone" the BROWSE permission and get rid of this manual permission granting process?
Please feel free to ask for any additional information you need to help me on this issue.
Thanks!
-Vinay Pugalia
If a post answers your question, please click "Mark As Answer" on that post or
"Vote as Helpful".
Web : Inkey Solutions
Blog : My Blog
Email : Vinay PugaliaHi vinaypugalia,
According to your description, you want to grant permissions for users to access report server in a batch, right?
In your scenario, you can use
script files( AddItemSecurity.rss and ConfigureSystemProperties.rss )with the Reporting Services SOAP API to assign permissions. It’s better that you add those users to a user group then run those script.
Similar thread for your reference:
SQL script to grant user permissions for SQL Server Reporting Services
Programmatically adding users to SSRS?
If you have any question, please feel free to ask.
Best regards,
Qiuyun Yu
Qiuyun Yu
TechNet Community Support -
How to grant select permission to all the tables in the user
Hi All,
I have 5 tables in one user, now i want to give only select privilege to another user on those tables. Please help me to solve this issue.
Thanks in Advance.
Thanks and Regards,
chiranthSee following discussion: Re: Select Grant on another schema
-
How to grant write permission to external HDD
bought a new portable 1TB USB 3.0 Buffalo HDD, unable to transfer data, HDD is NTFS formatted but I am usin PARAGON NTFS for MAC. My other portable HDD of seagate is working fine. New Buffalo drive does not acknowledge WRITE permission its showing only READ.
Right-Click on the OU and select Properties
Select the "Security" tab
Select the "Advanced" tab
Select the "Add" button
Enter the security principal name
security principal
Ok
Properties tab
Apply to:
Descendant User objects
Permissions:
Read servicePrincipalName - Allow
Write servicePrincipalName - Allow
Ok
Ok
Ok
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights. -
How toplink grant permission for direct field access
I know already know that if I need to direct access private or protected field of an instance I must grant supressAccessChecks to ReflectPermission class using policytool or edit java.policy file directly ...
but how Toplink grant this permission to ReflectPermission class since my java.policy file remain the original.
Kowit LaisonIn my own experiences, the first release of JDK 1.2 had problems with reflection accessing private attributes. As you mentioned, you had to have a policy file that allowed TopLink access to reflectively access private attributes.
Since subsequent releases (1.2.x, 1.3, 1.4, etc), it always has "just worked". I.e., it seems to be default behavior of JVM's that you can acess private attributes through reflection. Sometimes some app servers come with startup scripts that have policies that change this default behavior and you have to override it, but in general, a vanilla JVM simply will allow private attribute access through reflection.
- Don -
Hi All,
can anyone tell me that how to grant read permission on all tables of a database except tables that belong to system tablespace.
ThanksHandle: 788442
Status Level: Newbie
Registered: Aug 14, 2010
Total Posts: 58
Total Questions: 17 (12 unresolved)
so many questions & so few answers.
how I can find out the tables name that not are in system tablespace.just modify the previously provided SQL -
How to get the permission of a file in java
Hi All,
I need to get the permission's that are granted to a file and how to modify its permission.Which class in java is used for this purpose?Kindly give me a solution.Thanks in advance.java.io.File class can be used.
File f = new File("filename");
S.O.P(f.canRead());
S.O.P(f.canWrite());You can set the attribute using Runtime class.
Runtime r = Runtime.getRuntime();
Process p =r.exec("attrib -r file");If you are working with unix,
r.exec("chmod -permissionoptions file"); -
Error while granting Java permission to Oracle user (schema)
Hi,
I am trying to grant java permission as sys to an Oracle schema 'RCA' as follows but am getting the error ORA-29532: Java call terminated by uncaught Java exception: java.lang.SecurityException: policy table update java.io.FilePermission, <<ALL FILES>>. Could anyone please tell me how to resolve this issue?
DECLARE
KEYNUM NUMBER;
BEGIN
SYS.DBMS_JAVA.GRANT_PERMISSION(
grantee => 'RCA'
,permission_type => 'SYS:java.io.FilePermission'
,permission_name => '<<ALL FILES>>'
,permission_action => 'execute'
,key => KEYNUM
END;
Error at line 1
ORA-29532: Java call terminated by uncaught Java exception: java.lang.SecurityException: policy table update java.io.FilePermission, <<ALL FILES>>
ORA-06512: at "SYS.DBMS_JAVA", line 752
ORA-06512: at line 4
Thanks in advance for your help.
Regards,
Raj
Edited by: 906041 on 4/01/2012 18:31
Edited by: 906041 on 4/01/2012 18:33below worked for me
18:44:11 SQL> connect / as sysdba
Connected.
18:44:19 SQL> DECLARE
KEYNUM NUMBER;
BEGIN
SYS.DBMS_JAVA.GRANT_PERMISSION(
grantee => 'DBADMIN'
,permission_type => 'java.io.FilePermission'
,permission_name => '<<ALL FILES>>'
,permission_action => 'execute'
,key => KEYNUM
END;
18:44:20 2 18:44:20 3 18:44:20 4 18:44:20 5 18:44:20 6 18:44:20 7 18:44:20 8 18:44:20 9 18:44:20 10 18:44:20 11 18:44:20 12
PL/SQL procedure successfully completed.
18:44:36 SQL> 18:44:36 SQL> 18:44:36 SQL> Edited by: sb92075 on Jan 4, 2012 6:45 PM -
What is the GRANT or permission setting that allows viewing of package body
For purposes of SOX and security/audit control, we log in under our network id's in our production environment. We have sourcecode compiled into Oracle seeded schemas ( APPS ) so that scheduled jobs are able to run with submitted from the Oracle Applications environment. We don't compile code into our personal network account areas.
I know how to GRANT EXECUTE privs so that we can execute a package in another schema, but what I want to do is to be able to view the sourcecode in another schema. Compile into APPS but be able to see the package body from my network id schema account.
I can't seem to find what the correct permission is anywhere. Granted I can look at DBA_SOURCE to get to it, but I want to use a tool like SQL Developer or TOAD to look at the code in a more presentable and easier to debug manner.
Any help ?I guess you need GRANT DEBUG ON SCOTT.PKG TO U
SYS@LSC01> create or replace package scott.pk is procedure p; end pk;
2 /
Package created.
SYS@LSC01> create or replace package body scott.pk is procedure p is begin null; end; end pk;
2 /
Package body created.
SYS@LSC01> grant create session to u identified by u;
Grant succeeded.
SYS@LSC01> grant execute on scott.pk to u;
Grant succeeded.
SYS@LSC01> connect u/u
Connected.
U@LSC01> select text from all_source where name='PK';
TEXT
package pk is procedure p; end pk;
U@LSC01> connect / as sysdba
Connected.
SYS@LSC01> grant debug on scott.pk to u;
Grant succeeded.
SYS@LSC01> connect u/u
Connected.
U@LSC01> select text from all_source where name='PK';
TEXT
package pk is procedure p; end pk;
package body pk is procedure p is begin null; end; end pk; -
Granting roles permission to run packages created by somone else
Hi there,
I'm using Oracle 9i and I've written a package that has several functions that need to be run by a role other than the owner. I have 2 roles I granted execute permission on the package itself but when I log in to our app as another user with one of those granted roles, I get the 'insufficient privilege' error.
My DBA mentioned something about doing a pl/sql wrapper. I did a search under wrap in the oracle index and came up with a wrap utility. If this is what he meant, I don't understand how that helps with permissions if the wrap util just encrypts my package. How do the roles get permission to run it then?
Thanks
EvitaIf you call the stored procedure from a PL/SQL block, there will be a problem that PL/SQL does not, by default, recognize privileges granted through a role. You can either make a direct grant or you can change the PL/SQL block to specify authid current_user.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC -
Granting security permission to applet
Hi,
I have an applet which writes a .txt file to local disk. I want to call it through Javascript. Can anyone pls let me know how I can grant security permission to my file writing applet through Javascript?
Thanks,
PrasannaHi Munsifuv. You might get more help on this and your other AX questions on an AX-specific forum. We can help with connecting Power Query to data sources, but aren't necessarily experts on configuring those sources.
Thanks,
Ehren -
Hi there!
I want to integrate Airplay technology in a new and innovative Speaker System.
I've searched the internet, but couldn't find anything.
Does anybody know how to get the permission to use it?Apple
1 Infinite Loop
Cupertino, CA 95014
408.996.1010
...ask to speak to someone about licen$ing. -
How do I manually delete iTunes and all its bits prior to re-installing the version 11 when I get a message saying I don't have permission.
I am the sole owner of my p.c. and nobody else uses it. How do I "get permission" from my own p.c.?
The p.c. is a Dell Vostro running windows 7 (64 bit) After giving up and exiting iTunes there was an error notification saying msvcr 80 is missing from your computer...Also, when I went (blindly) to administrators etc there was a red question mark against a gobbledegook long line apart from David pc which is me. Would this be some malevelant thing? Help!Hi David,
Open the start menu, then select Control Panel in the right hand column. Open the Programs and Features section, type Apple in the search box at top right. You need to uninstall the components in the order suggested in the user tip.
Once all have been uninstalled reboot and use Windows Explorer to locate the named folders and delete them. Then reinstall.
tt2
Maybe you are looking for
-
How to start and finish a transaction using EJB 3.0 in JDeveloper
Hello everybody! Does anybody can explain how to start and finish a transaction using EJB 3.0. I need to start a transaction insert some information in some tables and if everything was fine commit the information. I put the annotation @TransactionMa
-
Mysteriously Missing Main.asc
Have any of you ever heard of a main.asc file being "mysteriously" deleted from an application's directory? I'm working on a client project that was being developed on an in-house Fedora Core 5 server where I'd installed FMS. I uploaded the client's
-
Love my iPad. Hate the absence of Flash.
Love my iPad - hate the absence of Flash. Many websites require Flash. So, I have to revert to MS (brrrrrr) for simple enquiries.
-
can anybody explain what is the main difference between static and instance components of a class in all aspects.
-
I sent an email to a government agency and got a message back that said I was a spambot. What does that mean?