Questions tagged [access-control]
Access control is the process of limiting the access of ability of users or services to certain resources.
1,373
questions
0
votes
0
answers
10
views
Granting Domain Users Specific Folder Permissions on a Network Share in PowerShell and Handling In-Use Files
I'm seeking assistance with a PowerShell script designed to manage permissions on a network share folder. The goal is to grant domain users (in the format domainname\domain users) specific permissions ...
0
votes
0
answers
25
views
Open FGA Wildcard Relationship From Object to User
I am trying to define user and admin schema in OpenFga
model
schema 1.1
type user
relations
define admin: [admin#member]
type admin
relations
define member: [user]
I have added ...
0
votes
1
answer
41
views
MLRun, Role issue - Read only mode for Events, Identity, Grafana, etc
I'm having trouble with accessing the typically admin parts of the Iguazio platform, like 'Services', 'Identity', 'Clusters', 'Grafana', ... but in read-only mode.
When I used 'Application Read Only' ...
0
votes
1
answer
22
views
How to Restrict Access to Maven automation testing framework Project's Main Folder Contents?
I have a Maven automation testing BDD-Cucumber framework project where the main folder contains essential testing configurations and reusable components. I want to allow clients to use these ...
1
vote
1
answer
69
views
How to format Ceph S3 bucket-policy Principal?
I'm trying to set the bucket policy for a Ceph S3 bucket.
This policy works but enables public access
{
"Version": "2012-10-17",
"Statement": [
{
...
0
votes
0
answers
16
views
Can the mechanism of `java.security.AccessControlContext` be generalised to include any context information?
This question is derived from reading Hadoop credential management: In Hadoop 3.3+, function UserGroupInformation.doAs can introduce an "execution scope", that allows some context ...
0
votes
0
answers
9
views
Access to fetch at 'ok.com/okbro.jpg' from origin 'http://localhost:3000' has been blocked: Response to request doesn't pass access control [duplicate]
Access to fetch at 'http://localhost:5000/image_search?url=https://5fbb4b60e5a371522c26-c46478628be7be7c70f96ec65a31d1c7.ssl.cf3.rackcdn.com/Images/ProductImages/9f0b0638-9ade-46cd-bdaf-284a7dcef792....
0
votes
0
answers
38
views
TYPO3 10.4 - how do I determine which FE-Group may assign a BE-Group?
i am using TYPO3 10.4. I have a BE-Group which rules the access to a specific page, where a my FE-Users. I got it to enable the access to this page and enable that the BE-group is allowed to create ...
0
votes
0
answers
12
views
Implementing customized Access Control using Spring Security and ACL
I need to extend an application developed in Spring platform. I have a number of tasks in different categories and a number of users in different groups. Each task, depending on its category, must go ...
0
votes
0
answers
47
views
CORS issue when connecting Angular project to Laravel backend - No 'Access-Control-Allow-Origin' header present, but it work in PostMan
I have a problem and I would like to know where my error is: I want to connect an Angular project to Laravel, but I'm getting this error: "Access to XMLHttpRequest at 'https://back-domain.com/api/...
0
votes
0
answers
15
views
Are apache syncope or WSO2 IS suitable choices to handle access control?
I have some rest APIs developed using Spring. Depending on the perissions of different users, the access control process should be applied to these services. For example, based on a number of rules (...
1
vote
0
answers
78
views
Authorization header included despite CORS
I have a really decent understanding of CORS and how it works. Some of the things I know pretty well from resolving past CORS errors and reading the spec are below:
By default, the browser omits ...
1
vote
0
answers
12
views
Oracle light weight directory access protocol
I am using Oracle Lightweight directory manager of version 170717. I am trying to provide restricted access to my ldap by using ip bind keyword. But after some time around 20+ minutes. When I try to ...
-1
votes
1
answer
64
views
Why do memberwise initializers become 'private' when the structure contains a private property?
The default memberwise initializer for a structure type is considered private if any of the structure’s stored properties are private.
(Source: https://docs.swift.org/swift-book/documentation/the-...
0
votes
0
answers
29
views
CORS access-control-allow-origin
I am using Sanity studio to take care of my backend, and now that I have created my client.js and .env files to be able to access the data from sanity and implement it into my website, I am getting ...
0
votes
0
answers
16
views
How to prevent content in iframe from being dragged outside in developer tools
I am using an iframe in another iframe to add watermarks to an embeded video player.
The issue I am having is that from the developer tools, it's possible to drag the embeded player iframe outside of ...
0
votes
0
answers
18
views
"Red Hat JBoss Enterprise Application Platform - Management Console - External User Management"
How can i assign external ldap users to specific application roles.
There is a section names "Access Control" in management console, and a users section under "Access Control" . My ...
0
votes
0
answers
22
views
How to restrict access to application features based on plan
I'm currently developing a application in nestjs that provides some service to the user. User will select a plan,features will be accessible based on the limit set by plan.
As an example: say there ...
0
votes
0
answers
10
views
How to implement restriction on accessing appliction feature based on plan
I am currently developing an application in nestjs, that provides services to the user. User selects a plan user will get access to features based on limit defined by plan.
As an example: let us ...
0
votes
0
answers
20
views
Is it safe to delete this empty `google_storage_default_object_acl` with terraform?
I used terraformer to import my terraform state for an existing project.
It's imported a long list of ACLs, many of which have no entities in the list:
resource "google_storage_default_object_acl&...
0
votes
1
answer
80
views
Can I restrict my GCP resources(deployments/services/instances) based on IP range restricted to project/folder/org level?
I have applications deployed on GCP. My requirement is to:
Restrict the above deployments based on the IP address originating from within a project/folder/Org level.
So for example, If I have a GCP ...
0
votes
1
answer
80
views
Property must be declared fileprivate because its type ... uses a private type
I just tried something to better understand access levels. In documentation for tuple's access level , there is a description from:
The access level for a tuple type is the most restrictive access ...
1
vote
0
answers
22
views
How to use IAM tools such as auth0 to implement user access control in a SaaS product
Assumptions:
My company provides 5 products (cloud-based web applications)
I want to build a page for my client’s IT manager to manage the user access rights in his/her company.
Example scenarios ...
1
vote
2
answers
178
views
Fine-grained file access control and folder access permissions for fe_users in TYPO3
I'm facing a challenge with file access control in TYPO3, and I'm hoping to get some guidance or suggestions from the community.
Problem:
I need to implement a file access control system in TYPO3 ...
1
vote
1
answer
168
views
How to get data from Quizlet without API using Node.js
The Quizlet API has been dead for a while but I want to work on a project that uses their study sets. I spent a while trying to find an API to use but there were many misleading claims; some say the ...
0
votes
1
answer
86
views
Taking document ownership programatically in FileNet Content Engine 3.5
In an odd scenario where the creator of a document has explicitly removed all of the administrative groups thereby making the document effectively inaccessible, I am having to manually take control of ...
0
votes
0
answers
56
views
Define different access policy to macOS/iOS keychain items
I'd like to allow only a specific process to read sensitive items from keychain (based on process signature using method SecItemCopyMatching), and fail any other read attempt.
Is it possible, what are ...
0
votes
2
answers
662
views
Proper usage of OAuth2 scopes
I‘m confused about the usage of OAuth2 scopes.
From my understanding an OAuth2 scope is a permission granted by the end-user to an application to do something on their behalf.
However, I've come ...
0
votes
1
answer
180
views
Guidance about when to use UMA in Keycloak
I started using Keycloak and stumbled upon User-Managed Access (UMA) when trying to implement fine-grained access control. As far as I understand, UMA is an extension of OAuth2 that provides an ...
1
vote
1
answer
624
views
What is the difference between roles and scopes in Azure's role-based access control (RBAC)?
I'm reading the What is Azure role-based access control (Azure RBAC)? article in the official docs, but it is hard to discern how scopes and roles are different.
Read the following threads, but didn't ...
0
votes
0
answers
55
views
Can't find any PIP implementations to power ABAC. Do any exist?
There seems to be a decent amount of work going on with ABAC, and there are many libraries that implement what seems to be basically the PDP portion of it:
CASL https://casl.js.org/v5/en/guide/intro#...
3
votes
0
answers
86
views
Does argument-dependent lookup also include overload set in inaccessible bases?
Here's a simple example:
template<typename T>
struct t1 : protected T
{
};
template<typename T>
struct t2
{
template<auto Index>
struct inner : t1<T>
{
private:...
0
votes
0
answers
28
views
Modifying access_control dynamically in Symfony 4.2
I'm working on a SAML SSO implementation with Symfony 4.2.12 and hslavich/OneloginSamlBundle, which could be enabled or disabled by the user. When enabled, I need to modify the security.yaml ...
0
votes
0
answers
262
views
Set Access-Control-Allow-Origin in Wordpress
I've already put the following guideline in the .htaccess of my Wordpress site:
Header set Access-Control-Allow-Origin "'self'
https://*.example.com"
So that I can could avoid Cross-origin ...
0
votes
0
answers
425
views
Ads - Blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource
I am seeing this error via Google inspect on my Wordpress website.
Access to XMLHttpRequest at (ad lines I have removed) from origin
'https://www.awakenthegreatnesswithin.com' has been blocked by ...
-4
votes
1
answer
84
views
Why you not use an open keyword with structs in swift? [closed]
everywhere talk about only classes with open/public keyword so it would be great if swift experts can provide satisfying answers with an example.
for eg: we can do this in class but don't do it in the ...
-1
votes
2
answers
498
views
I have problems with Post method in my CORS? [duplicate]
I am developing an app with my own sever, i configured my cors with to by client-side host only. Everything seems to be fine i can request data from my database using the GET, but whenever my trying ...
0
votes
1
answer
20
views
What are the best practices to create and manage users used in Google Compute Engine virtual machine
I am trying to create a gcp compute engine vm and create some users and user groups and define some folders and files and applications that are only accessible by certain users or groups. I did that ...
0
votes
1
answer
158
views
Can I grant admin access to an Azure resource group and Synapse workspace for an account in a different directory and subscription?
I have a resource group in one of my accounts that has Visual Studio Professional subscription. In the resource group I have several resources including a Synapse workspace.
I have another account ...
1
vote
0
answers
44
views
Approaches for a Database Middleware
We are building a platform in form of a microservice architecture which shall be open to add services from several companies.
The services shall use a common data warehouse (including a NoSQL database ...
1
vote
1
answer
74
views
How can I enable access only to a specific plugin (Newsletter) to a new user on the wordpress admin dashboard?
I am using the Newsletter plugin to send newsletters from my Wordpress website. I want to create a new user who can only access the Newsletter plugin and not have any other admin capability on the ...
5
votes
1
answer
2k
views
Symfony sensio/framework-extra-bundle is abandoned and i cannot find an IsGranted alternative
(on a Symfony 5.4 PHP 7.4 project)
So far I am using IsGranted to restrict access in controllers per role.
i.e.
use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted
class PostController ...
0
votes
1
answer
77
views
How do I add origin access control to S3 object within sceptre template?
I can use AWS console to follow directions and set up an S3 object behind CloudFront using an "origin access control." There's a trickiness in a certain ordering of creating and updating ...
1
vote
0
answers
180
views
Compine RBAC with ABAC casbin
I am quite new programmer and I need your help. I need to combine RBAC with ABAC. For the application requirements, imagine that we have some endpoints that some users with a specific role have access ...
0
votes
1
answer
225
views
Dynamic IAM Policy for DynamoDB
I am exploring fine-grained access for an API that we are building. APIs are hosted on API Gateway with a lambda handler and the datastore is DynamoDB. I need to apply row-level and attribute-level ...
0
votes
0
answers
35
views
Field level protection for web api based on roles
I have an internal Web API which exposes JSON. I would like to expose some of the features based on roles of the authenticated user (or machine) from JWT or API-key.
E.g internal API where filter....
0
votes
0
answers
52
views
neo4j graphql @auth only read if relationship property is x
Inside @auth allow or where field, I would like to access the role of the user on PART_OF_TEAM to determine whether or not they should read/edit the posts.
As an example: a user connected to a team ...
0
votes
0
answers
15
views
Only allow traffic to web interface when coming from specifuc users/domains
I have two services that customers can use, dashboard.mydomain.com which is universal for all customers, and monitor.mydomain.com, which is the web interface of a device specific to the customer. Each ...
0
votes
3
answers
2k
views
How to restrict access by particular user to bucket using bucket level policy in minio?
I am configuring minio as S3 compatible storage.
Based on https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html
I understood that I can limit access to the bucket using ...
0
votes
1
answer
228
views
Which s3 policy types are supported in MINIO?
I am investigating minio. For now I have docker-compose with minio service and minio console is available for me. As I understand minio is kinda replacement for amazon s3.
I've found the following ...