Questions tagged [permissions]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
19 views

What are the best practices for sharing production Postgres access with developers?

We're a small SaaS startup (~10 person team; mostly engineers). We use Postgres on AWS and GCP in production. We have signed contracts with some customers that prohibit us from giving full production ...
0
votes
1answer
24 views

Docker mounts files as uid 1001

I have a Docker image that runs a PHP application. Everything works fine on my machine and the ones of my colleagues. However, some colleagues got a new computer that runs on Ubuntu 20.04 and by ...
0
votes
2answers
59 views

Dockerized node.js and bind mount permission problem

I have an interesting problem with node, docker-compose and local development using bind mounts. I have a bind mount volume, called www-public, owned by my host node user (I created a node user and ...
1
vote
1answer
33 views

Is there a way to tell if an Azure Devops Extension is secure to use?

How do I know that an Azure Devops Extension does not do anything really bad? A company that I know of uses Microsoft's Azure Devops platform to manage its software development. Microsoft also ...
0
votes
1answer
49 views

Add permissions to readers (DevOps Web Portal)

I have a public Azure DevOps project, and I want to allow everyone to add Work Items. However, adding the Readers group as a member of Contributors for the permissions doesn't change anything, and I ...
1
vote
1answer
924 views

Permission denied within mounted volume inside Docker/Podman container

I am starting to learn about containers using podman that came with RHEL8.1 (which AFAIK can be used in place of docker), and have the following baby Dockerfile as a learning exercise: # Use Alpine ...
3
votes
1answer
105 views

kubernetes: how to set “top node” and “top pod” permissions?

Hoping for some pointers, I have a question: what role/permissions do I need to bind to a user that has ClusterRole=view in order to let that user use top node and top pod commands in kubectl? My ...
1
vote
1answer
147 views

Assign Directory Read/Write Privileges to Azure Service Principal from the command line?

I am trying to provision a user in Azure Active Directory using Terraform's AzureAD provider. At the top of the azuread_user documentation, it states: NOTE: If you're authenticating using a ...
3
votes
1answer
58 views

Provide customers with access to Azure Container Registry

I'm using Azure Container Registry for private Docker images. I want to let around 500 customers pull images and use the Docker V2 HTTP API to read metadata. Service Principals are one way to go ...
1
vote
2answers
25 views

See which Roles contain a GCLOUD Permisson

I'd like to see wich Roles in iam yield a certain permission. In other words, for a given permission (like billing.accounts.updateUsageExportSpec) I want to know a list of Roles, that satisfy this ...
0
votes
2answers
53 views

What is the most common server permission policy for web application deployment?

I have a server with Ubuntu with a web server (Apache or Nginx) running a PHP application. The application consists of the following parts: An executable code that handles HTTP requests (say in the /...
0
votes
1answer
61 views

how to give a user privilege to run Ansible commands or just an specific tag?

for example, I have a tag named 'installagent' and i want to run this command ansible -playbook -i /path agent.yml --tags installagent from another server via ssh on my Ansible server with user '...
8
votes
4answers
144 views

How do you limit access to the production environment in the company you work for?

In the company I work for, devops engineers (currently only 2 members, who are me and another coworker) are the only people who have access to the production database. So when any other developers ...
13
votes
2answers
30k views

How to change the owner of VOLUME directory in Dockerfile?

I've got the following Dockerfile: FROM ubuntu:xenial RUN useradd -d /home/ubuntu -ms /bin/bash -g root -G sudo -p ubuntu ubuntu WORKDIR /home/ubuntu USER ubuntu VOLUME /opt/myvolume Which I built ...
2
votes
1answer
3k views

Permission errors with non-root USER when running on Linux

I have been getting some unexpected failures with the execution of my Docker images when running on my Ubuntu 16.04.3 LTS machine. I'm using Docker version 18.02.0-ce (edge), installed from apt. I've ...
2
votes
1answer
707 views

Using docker with users leaves files belonging to the subuid/subgid

Background I wish to make sure all people and automated processes working with my project use the exact same version and environment of some tool which has to do work on the host file system. ...
2
votes
1answer
2k views

Ansible tmp files created with odd permissions

I have an ansible playbook which can be simplified to this: - name: Provision server hosts: all_hosts become: yes ...
12
votes
1answer
394 views

How to restrict filesystem access in Atlassian Bamboo builds?

We have Atlassian Bamboo running on Ubuntu. When a developer is setting up a build, then he or she has the possibility to run shell script tasks. This is useful to run (custom) commands on the ...
2
votes
1answer
5k views

What are the different job permissions possible in Jenkins, and what are the reasons you would use each?

I'd like to understand better job permissions in Jenkins. What type of user permissions can I setup in Jenkins? And when would you use each?