Collaborate Disseminate
I came across a strange group policy setup once and was wondering if anyone can make sense of it. We were NOT allowed to run executables that were stored on the local disk or network drives, but we could run executables that were on a USB … Continue reading Difference between running executable from disk vs removable media
I have no admin control over my Samsung Android 13 phone.
My device reverts back to settings I change.
My location gets deleted.
I go on WhatsApp/TikToc etc and I have a profile I can actually click on and see
I don’t have dual apps.
I ke… Continue reading Problems with phone [closed]
I am trying to secure automatic infrastructure provisioning but I am having a hard time designing a proper access policy that would not create a single point of failure (I tried and failed about a year ago already).
How best to design a pe… Continue reading Permission model for automated infrastructure provisioning
While running a VPS for shared hosting, I put the data for the various users and websites as /var/www/[USER]/public_html/[DOMAIN]/…. I’d like to make sure that one user cannot access data from another user. I run NGINX + PHP-FPM on CentO… Continue reading Prevent read access to other users’ files using SELinux
A very simple access model: I have users and resources. Each resource has an owner. Owners can can grant other users read and write permissions to resources they own (and transfer ownership). So essentially each resource has a policy that … Continue reading Term for a access control model based on users sharing resources with each other?
We’ve created a new Azure DevOps project. I was assigned all "Allow" permissions by the project creator but still cannot "edit" our Wiki pages (the edit button is simply greyed out). Only the project creator is able to…. Continue reading Trying to edit the "Wiki" page in a new Azure DevOps project but the "edit" button is greyed out. How can this be fixed?
I have noticed that when I clear data for TikTok and use a VPN (I turn that on before opening an application with freshly cleared "all data") without signing in to an account, TikTok still shows me videos that are popular in my r… Continue reading What are some of the mechanisms TikTok application uses to obtain approximate user location? [closed]
In AWS Cognito we could define a role/permissions as a custom attribute in the user pool, but we could have a User table and a caching database and fetch roles each time the user does a request.
Of course, the first approach avoids an unne… Continue reading Is there a problem to store user permissions in the database instead of in a external auth service?
I have a main user with home folder encryption enabled. To avoid typing long phrase each time I want to have another user with sudo privilege and weak password.
In the terminal I would first switch user to further do any admin work
main@ma… Continue reading Sudo user without ability to login
I am not an infosec professional, but I’m working on a project that requires designing and implementing a permission system for a customer. The system the customer proposes is as follows:
Users are assigned to roles such as viewer, editor… Continue reading Is it a good idea to combine DAC with RBAC in this way?