Question about NTFS Permissions (Read Permissions)

Hello All,
I hope somebody can help me. I am wondering about the ACL Atribute "Read Permissions"
Lets say I created a shre named "Share1" were "User1" has read Access. I created a Folder named "Folder1" in share. In the NTFS Permssions I specified that User1 can "Traverse Folder and List Folder" . With These
t atributes set the User is able to Access Folder1. But when I copy a File there - doesnt matter if it is a text document, an exe file, or so, the user is not able to Access the ressource. He gets an Acces Denied Error. Only if I add the Permission "Read
Permissions" the user is able to open the file.
I dont get why the user is able to open the Folder but not to execute files with the same permission. Is it possible to open a Folder without "Reading Permession Atribute" but not open a file?
Why is the Feature available if i cant block users from reading permissions of a specific file?
Thanks a lot in advance.
Marco

Something isn't adding up. "Read Permissions" should be there by default because just about any basic permission grants the "Read Permissions" advanced permission. See the tables in the following TechNet to see what I mean.
http://technet.microsoft.com/en-us/library/bb727008.aspx
Check the Scope for the User1 entry on the Folder1 ACL. The Scope is shown under the "Applies to" section from the screenshot below. If it doesn't read "This Folder, subfolders, & files" you may want to see if changing to that makes a difference.

Similar Messages

Basic question about accessing card reader from browser

Hi,
I am very new to card technology. I have a very basic and general question not directly related to java cards.
I need to write a web application that allows the user to read a card with a card reader.
For that I maybe need to write an applet that has to access a native DLL and call methods
to get the card ID. I already have that DLL (written in Delphi) that reads multi-technology cards.
Then pass that ID to the application server to retrieve complete information
about the card holder and display them on the user browser.
Please could someone guide me on useful resources for that kind of development, for example
already existing developments, personal experience, design solutions ?
Thanks.
Adriano

Hi Joseph,
One thing I forgot to tell is that I work with contactless cards and readers.
Contactless cards use radio frequency. Despite this fact, the problem stays the same. I already have a Delphi DLL that reads contactless cards.
What I need is a way to retrieve card holder information from a client browser. The card contains a unique ID. My idea is to use an applet that reads that ID on the client-side and then calls a servlet on the server-side to retrieve holder information associated with that ID, i.e. first and last names, and finally displays them on the client browser.
So the card contains only the unique ID, a database on the server-side contains all other related data.
Technically the applet has to call the DLL via JNI.
Do you think that using an applet that way is a good solution, do you see simpler solutions, is there security issues ?
Thanks.

Question about the BOOperation READ in the UI Designer

Hi,
I just noticed that the BOOperation Read in the UI Designer can use the NodeID, the KeyNavigation and the alternativeKey.
About the AlternativeKey I have no doubts... but what about the NodeID and the KeyNavigation? Can somebody explain me the differences between these keys?

Hi Alessandro,
I created a custom BO:
businessobject StudioInformationHandler {
[AlternativeKey] element CustomerUUID : UUID;
element CustomerID : ID;
association ToCustomer to Customer;
association ToStudioInformation to StudioInformation;
That is an add-on to the customer.
I made an embedded component for the customer based on this BO. The EC has the CustomerUUID and CustomerID in the inport. In the event handler I try to read the BO instance with BOOperation.
When debugging my script in After-Modify I expect to have the persistent instance, but I have a new one. I can query my BO and get the persistent instance.
I think I make a mistake in the BOOperation but I don't know what's wrong. Another suggestion is that data binding in my EC is not as expected.
I attach a screenshot from my event handler and from the data model.
The CustomerID is not used at the moment. I tried it with the ID and UUID, but both didn't work for me.
I think there is something I didn't understand yet.
kind regards,
Frank

Question about System.in.read()

Hello Everyone,
I am having a problem with System.in.read(). I want it to produce an int value, however when I use it the value always comes out to 49.
class Lawn2
     public static void main(String []args) throws Exception
          int lawnSize, lawnPrice, weeklyAmt, length, width;
          length = 50;
          width = 10;
          System.out.println("Enter Width");
          width = System.in.read();
          System.in.read();
          System.in.read();
          System.out.println("You entered " + width);
          lawnSize = length * width;
}

Obvious as System.in.read() reads a byte and converts to ASCII equivalent when assigning to Integer.
Here is a sample code that shows one of many ways of reading input console data
import java.io.*;
class Lawn2{
     public static void main(String []args) throws Exception     {
          int lawnSize, lawnPrice, weeklyAmt, length, width;
          length = 50;
          width = 10;
          System.out.print("Enter Width : ");
          BufferedReader ln = new BufferedReader (new InputStreamReader(System.in));
          width = Integer.parseInt(ln.readLine());
          System.out.println("You entered " + width);
          lawnSize = length * width;
}

Question about Removing Permissions from the System Folder with chmod

Hi
I have a question about the removal of permissions from the System folder (and sub directories and files).
Background
Since installing a new HD, clean install of 10.6, application of updates and moving over backed up user directories I have had several issues with permissions.
I have read several threads on this and using disk warrior and other tools I have been able to fix most of the issues.
The Problem
The issue that remains is a permissions check using Disk Utility keeps reporting
ACL found but not expected on "System".
followed by an extensive list of sub directories and all.
Attempts to repair take hours and the same errors are reported.
Found Solutions
I have read about changing and/or completely removing the ACL from the permissions from the System using two different commands:
sudo chmod -R -N ./System/* ( to remove all ACLs)
or
sudo chmod -R -E ./System/* ( to replace all ACLs )
My Question is ( to the UNIX gurus):
What is the difference between the usage with -E and -R and which is the best approach for a Systems directory and (subordinates)?
Many thanks!!

OK
So I misread on the your instructions about the PW reset, did it, no harm in that. I did also select the options to reset all the permissions for all the accounts and the ACL issues were not resolved. My bad, I forgot to note that.
You do suggest getting and expert opinion but alas these are rather elusive. In most cases the Apple solutions is to do a complete reinstall... I have found that unless you completely wipe a drive and rebuild everything there are often artifacts left behind. Since I have full and redundant back-ups I would rather explore and hack a little instead of a dull old system reinstall. The irony is the system issue I had was it was the result a reinstall and combo update on a new drive. I recognize the risks of entering the realms of the System folders but I am willing to explore knowing full well that I have a path to recovery.
Thanks again for your insights. I come to the forums looking for insights and ideas but not a lecture...

Question about firefox permissions for sites

i have a question about sites permissions
in google chrom it is easy to set permission for each site like (java, flash plugin, image , ...)
http://i58.tinypic.com/nl66v9.png
but i prefer to use firefox
is there any addon or something else to have this options in firefox ?

You can inspect and manage the permissions for the domain in the currently selected tab via these steps:
*Click the "[[Site Identity Button|Site Identity Button]]" (globe/padlock) on the location/address bar
*Click "More Information" to open "Tools > Page Info" with the Security tab selected
*Go to the Permissions tab (Tools > Page Info > Permissions) to check the permissions for the domain in the currently selected tab
You can inspect and manage the permissions for all domains on the <b>about:permissions</b> page.
*https://support.mozilla.org/kb/how-do-i-manage-website-permissions

Question about permissions in portal content

Hi all,
I'd like to ask you guys a question about permissions given to pages in the portal content (EP 6.0).
When a user accesses a page that contains an iView (for example one for a Web Dynpro, or for a BSP), and the page permissions are correctly set for the user (or a group the user is member of), everything works fine and the user can see and use the application contained in the iView.
If the Page has no permissions set and the user tries to access this page, an empty page appears instead and the "Detailed Navigation" column appears on the left.
I know I should not let the user see the link to the page he is not authorized to use (this is done managing the roles given to the user), but I'd like to know from you if it is possible to show a message like "unauthorized user" instead of the empty page that appears.
Can you also tell me how to keep the "Detailed Navigation" column hidden on the extreme left?
Thank you for any hint you can give to me.
Lorenzo

Hi Lorenzo,
a way how you might go ahead and hide or show content for specific user groups is via roles merging (see documentation <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm</a>
In essence, this means that you create for example 2 roles (A and B): A contains some content everyone can see, B more secure content for another group. You merge those 2 roles via a merge ID - and if a user has both roles, he sees the content in this workset with all the navigation options. If somebody only has role A, he will only see this content.
Maybe this is someting that could help with you considerations (always depending on the number of items that are affected, this might be a useful way, or leading to too much confusion, because you have too much different roles).
Best regards
Jana

Making NTFS permissions read/write without ability to create/delete folders

Out at one of our job sites we have a server running Windows Server 2012 R2 that's got a file share accessible to our onsite people. Our project managers have devised a very strict folder structure for this file share, and for auditing purposes they want
to stick as close to this structure as possible.
Therefore, although people onsite must have read/write access to create, modify and delete files, they do not want them to be able to create or delete folders. They want them to use the existing folders and not tuck stuff away into folders that no one knows
exists except the person who created them.
The closest way I've found to do this is to deselect the advanced permissions 'Create folders / append data' and 'Delete subfolders and files.' This has a few side effects however, the most noticeable being that due to not being able to append data to files,
certain files (such as CAD drawings) can't be edited by anyone except the person who created them.
Is there a way using just NTFS permissions to accomplish what the project managers want? And if not, are there any useful third-party utilities that will help us do this?
Thanks in advance for any assistance.

Hi,
I'm not much familiar with AutoCAD- what's the exact behavior which is stopped by the restricted folder permission?
For example, if AutoCAD will create a folder in editing, we will not have a solution as users needed to create folders so that AutoCAD could run properly.
And if AutoCAD works like Office files, that create a temp file for editing, this will be the solution:
1. Give Domain Admins - Full Control - This folder, subfolders and files.
This is to allow all admin could access and edit all data.
2. Give SpecificUsers group (a group contain all normal users) - Full Control without "Change permissions" and "Take Ownership" -
Files Only.
This is to give that group most permissions to create, edit and delete files but not Folders.
3. Give SpecificUsers group another permission:
Traverse folder
List FOlder
Read Attributes
Read extended attributes
Create files - this is important. Without this permission you will not able to save Office files.
Read permissions.
Give above permissions to "This Folder, subfolders and files".
This is to allow users to access all subfolders.
If you have any feedback on our support, please send to [email protected]

A question about creating READ ONLY users.

Dear all,
I have a question about read only user accounts and I would appreciate if you could kindly give me a hand. I have a schema named SCHEMA1. Whenever I want to connect by using sqlplus I run the following:
sqlplus user1/[email protected] SCHEMA1.WORLD is the entry in the tnsnames.ora referring to the schema SCHEMA1.
I need to create a read only user who is able to SELECT all tables and views created by user1 on SCHEMA1 (this user will not modifiy anything at all. The user is used only for a person using SQL queries to read data). for several tables I write the grants explicitly, for example:
CREATE USER user2 IDENTIFIED BY user2;
GRANT CREATE SESSION to user2;
GRANT SELECT ON S001_COR_ECLASS TO user2;
GRANT SELECT ON REF_ECLASS511 TO user2;Is there anyway to do the same thing but for all the tables (because there are a lot of tables and views)? Besides, even with these granted permissions when the user connects with SQL Developer to the database, he is not able to view the list of tables/views in SQL Developer GUI. What causes this problem?
Thanks in advance,
Dariyoosh

Hello Dariyoosh,
he is not able to view the list of tables/views in SQL Developer GUIyou can either go to "Other Users" - user1 - tables. There you see every table you have permission to select.
Or you can create a synonym in schema2 for each table in schema1 and set a filter on the tables node of user2 "Include synonyms".
Regards
Marcus

Permissions "read only" after copying files FROM server

Hi everyone!
OK, just setup a Leopard server. Clients all at Tiger - level..for now. This is what I want to do:
I want a read only - network library drive so that the clients can grab files from but then modify locally on their machines. No need to put back on that server as I have another system in place for things like that.
*The problem:* If I propagate permissions at "read only" then when the user copies to their local drives, the owner changes but the permissions remain. They have to manually change the permissions back to match their local, then they can work with the file. When we're talking about hundreds of files for 15+ users a day, then it is quite a pain and a show stopper.
I had this setup previously on a panther server with no trouble. I've maintained settings as close as possible but still having trouble.
Any ideas as to what I'm missing?
FYI- I don't want to change permissions to read/write to protect the library from tampering.
thanks

+If I propagate permissions at "read only" then when the user copies to their local drives, the owner changes but the permissions remain.+
OK, from your description, you'd have to have the POSIX owner's permissions set to just read-only or read and execute. As you've observed, a copy obtains permissions in the following manner:
The POSIX owner changes to match the account performing the copy (the action-bearing account), and the POSIX group is inherited from the copy's destination parent. The POSIX permissions stay the same, though. (Inherited ACL entries on the original are also lost; explicitly-defined ones are preserved, and new inherited entries apply to the copy from its destination parent.)
All of this is proper behavior, and there's an easy way to make it work to suit your needs.
Since the POSIX owner changes to the action-bearing account for the copy, you'll want to ensure that the original POSIX owner's permissions are read and write. This does not require that you make the original's POSIX owner the same as that of the action-bearing account. An example would better illustrate the situation:
Example POSIX Permissions for the Original on the server:
Owner root can read and write
Group somegroup can only read
Everyone else can only read
Thus, let's say that tsmith is the action-bearing account. So tsmith copies the file to his desktop, and the POSIX permissions now look like this:
Owner tsmith can read and write
Group staff can only read
Everyone else can only read
Thus, tsmith receives the POSIX permissions of the POSIX group or everyone else field on the server - let's say there are no ACLs for the time being - and he becomes the owner of the copy. Since the original owner, root on the server, had read and write permissions, those permissions are preserved and given to tsmith for the copy.
Another way to deal with this situation would be to use ACLs by placing an inheritable ACL granting full control or read and write for tsmith on his home folder. Any new items copied to or created in his home folder would inherit that ACL. Similarly, an inherited ACL deny entry (but not an explicitly-set entry) affecting tsmith and the delete and delete_child controls could be placed on the affected server share point's top-level before the original was copied there. Then, any subsequent copies from the server volume would drop this inherited ACL entry entirely. These would, however, be much more complicated situations, and your scenario is best handled in the POSIX-only fashion. (This doesn't mean that you have to disable ACLs on the server - just don't apply them for the share point!)
--Gerrit
search:Owner read only

How to check whether a file got read permissions for perticular user

Problem: Let JRE is running with some x as effective user in LINUX then while checking file permission it is checking permission on that file for that x user.
File f = new File(�file name�)
if(f.exists())
System.out.println(�exists�);
Else
System.out.println(�does not exists�);
The above code prints exists only when x user have permissions on that file
Requirement: I would like to check whether a file got read permissions for particular user i.e. whether y user got permissions on that file.
Any help is appreciated

In Linux a user has to have read permission on a file to even see that it exists. As a result, if a user (or a group to which they belong) doesn't have read access to the file File.exists() will return false. Windows which doesn't have as tightly controlled access to files will admit that a file exists whether it can be read or not.
PS.
This is proof that I should never answer a question off the top of my head when I haven't had my red bull yet. This is wrong. You will be able to see it if you have read and execute on the directory.
thumps self in head
Message was edited by:
puckstopper31

Lost read permissions on files in Time Capsule backup

I've been doing some restores from my Time Capsule, but after re-installing Leopard fresh from the install DVD, I've lost read permissions on the files in the Time Machine backups. Clicking "more info" for the file in Time Machine shows that the listing for my user name "patrick" with read&write access has been replaced with "(unknown)". Is there any way to fix this? Thanks

Turns out that the mounted back disk (not the raw Time Capsule volume) has the backup folders, now I get it.
Anyway, I looked at those and am able to open them directly in Finder without going through Time Machine to add an ACL entry for me to read the necessary files using the "Get Info" dialog. It turns out that my old user id was 502 and my new user id is 501.
While I can get a few files that I need by manually adding a read & write ACL entry for myself, I can't change the owner on the files using chown, even as superuser. It keeps saying "Operation Not Permitted". I cant set the basic permissions with commands like chown 755 Library, either.
Any idea why? If I can't figure out how to set the own on all of the dirs in my home dir from various backups, I'll just have to try to get all my files that I need and erase the backup disk to start over, something I'm not really excited about.

Add a page still visible under the gear even Read permissions for the Pages Library

Hi,
Some of the employees have Read permissions on the Pages Library. The permissions have been broken for this Library.
They still see the 'Add a page' action under the gear. So if they want to create a page, SP asks for a page name and then they received the request to get access.
Is it a bug or is it standard?
Thanks,
Christophe

Hi,
I have done a test in my SharePoint 2013 to reproduce your issue, but I can't reproduce the issue.
If the users only have read permission on the Pages Library. They can't see the 'Add a page' action under the gear.
I suggest you use check permission to check the permission for the users, make sure they only have read permission on the Pages library.
Then you can do a test in another library and compare whether the issue is exists. if not, remove the user from the Page library and set read permission for him again.
If the issue still exists, Please offer a screenshot about the issue.
I am looking forward to your reply back.
Best Regards,
Lisa Chen
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Disk Utilities always "Reading permissions database."

[ Reading permissions database.
Reading the permissions database can take several minutes.
Permissions repair complete]
Each time I repair permissions I get this same dialog and then have to wait "several minutes" before anything happens. Does anyone else have these problems with DU repairing permissions after updating to 10.5.3? (I previously joined this thread, but someone decided to close the topic due to their having no problem with Disk Utilities: problem solved!) This is still going on with my computers ever since the update.

Thank you so much for giving me some confidence in my computer. One of my Apples (desktop G4 duo) has been only problems since I bought it about five years ago. I installed Leopard in the hope that it might be better, and, although I still have some problems, the number has dropped. Then I got up to 10.5.3 and worried that the problems were starting to begin again. Thank you for letting me know that I am not alone.

I have a question about Lightroom 5... I used it last night, I go to get on it today and its will not open. I have an error msg "Lightroom encountered an error when reading from its preview cache and needs to quit" Lightroom will attempt to fix the proble

I have a question about Lightroom 5... I used it last night, I go to get on it today and its will not open. I have an error msg "Lightroom encountered an error when reading from its preview cache and needs to quit" Lightroom will attempt to fix the problem when reopened

https://forums.adobe.com/message/6219922#6219922
See if the issue in the thread above helps you to solve your problem.

Question about NTFS Permissions (Read Permissions)

Similar Messages

Maybe you are looking for