Questions tagged [access-control]

Access control is the process of limiting the access of ability of users or services to certain resources.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Granting Domain Users Specific Folder Permissions on a Network Share in PowerShell and Handling In-Use Files

I'm seeking assistance with a PowerShell script designed to manage permissions on a network share folder. The goal is to grant domain users (in the format domainname\domain users) specific permissions ...
Aviad Ofek's user avatar
0 votes
0 answers
25 views

Open FGA Wildcard Relationship From Object to User

I am trying to define user and admin schema in OpenFga model schema 1.1 type user relations define admin: [admin#member] type admin relations define member: [user] I have added ...
JRudransh's user avatar
0 votes
1 answer
41 views

MLRun, Role issue - Read only mode for Events, Identity, Grafana, etc

I'm having trouble with accessing the typically admin parts of the Iguazio platform, like 'Services', 'Identity', 'Clusters', 'Grafana', ... but in read-only mode. When I used 'Application Read Only' ...
JzD's user avatar
  • 24
0 votes
1 answer
22 views

How to Restrict Access to Maven automation testing framework Project's Main Folder Contents?

I have a Maven automation testing BDD-Cucumber framework project where the main folder contains essential testing configurations and reusable components. I want to allow clients to use these ...
Dheeraj Kumar Rajak's user avatar
1 vote
1 answer
69 views

How to format Ceph S3 bucket-policy Principal?

I'm trying to set the bucket policy for a Ceph S3 bucket. This policy works but enables public access { "Version": "2012-10-17", "Statement": [ { ...
David Parks's user avatar
  • 30.7k
0 votes
0 answers
16 views

Can the mechanism of `java.security.AccessControlContext` be generalised to include any context information?

This question is derived from reading Hadoop credential management: In Hadoop 3.3+, function UserGroupInformation.doAs can introduce an "execution scope", that allows some context ...
tribbloid's user avatar
  • 3,958
0 votes
0 answers
9 views

Access to fetch at 'ok.com/okbro.jpg' from origin 'http://localhost:3000' has been blocked: Response to request doesn't pass access control [duplicate]

Access to fetch at 'http://localhost:5000/image_search?url=https://5fbb4b60e5a371522c26-c46478628be7be7c70f96ec65a31d1c7.ssl.cf3.rackcdn.com/Images/ProductImages/9f0b0638-9ade-46cd-bdaf-284a7dcef792....
AriC's user avatar
  • 1
0 votes
0 answers
38 views

TYPO3 10.4 - how do I determine which FE-Group may assign a BE-Group?

i am using TYPO3 10.4. I have a BE-Group which rules the access to a specific page, where a my FE-Users. I got it to enable the access to this page and enable that the BE-group is allowed to create ...
HaMaxim's user avatar
0 votes
0 answers
12 views

Implementing customized Access Control using Spring Security and ACL

I need to extend an application developed in Spring platform. I have a number of tasks in different categories and a number of users in different groups. Each task, depending on its category, must go ...
H.Morshedlou's user avatar
0 votes
0 answers
47 views

CORS issue when connecting Angular project to Laravel backend - No 'Access-Control-Allow-Origin' header present, but it work in PostMan

I have a problem and I would like to know where my error is: I want to connect an Angular project to Laravel, but I'm getting this error: "Access to XMLHttpRequest at 'https://back-domain.com/api/...
byNethZ's user avatar
0 votes
0 answers
15 views

Are apache syncope or WSO2 IS suitable choices to handle access control?

I have some rest APIs developed using Spring. Depending on the perissions of different users, the access control process should be applied to these services. For example, based on a number of rules (...
H.Morshedlou's user avatar
1 vote
0 answers
78 views

Authorization header included despite CORS

I have a really decent understanding of CORS and how it works. Some of the things I know pretty well from resolving past CORS errors and reading the spec are below: By default, the browser omits ...
egimaben's user avatar
  • 653
1 vote
0 answers
12 views

Oracle light weight directory access protocol

I am using Oracle Lightweight directory manager of version 170717. I am trying to provide restricted access to my ldap by using ip bind keyword. But after some time around 20+ minutes. When I try to ...
Vishwa's user avatar
  • 27
-1 votes
1 answer
64 views

Why do memberwise initializers become 'private' when the structure contains a private property?

The default memberwise initializer for a structure type is considered private if any of the structure’s stored properties are private. (Source: https://docs.swift.org/swift-book/documentation/the-...
Lyu Hiroyama's user avatar
0 votes
0 answers
29 views

CORS access-control-allow-origin

I am using Sanity studio to take care of my backend, and now that I have created my client.js and .env files to be able to access the data from sanity and implement it into my website, I am getting ...
IsaaCarpenter's user avatar
0 votes
0 answers
16 views

How to prevent content in iframe from being dragged outside in developer tools

I am using an iframe in another iframe to add watermarks to an embeded video player. The issue I am having is that from the developer tools, it's possible to drag the embeded player iframe outside of ...
Happy Jack's user avatar
0 votes
0 answers
18 views

"Red Hat JBoss Enterprise Application Platform - Management Console - External User Management"

How can i assign external ldap users to specific application roles. There is a section names "Access Control" in management console, and a users section under "Access Control" . My ...
balamir's user avatar
0 votes
0 answers
22 views

How to restrict access to application features based on plan

I'm currently developing a application in nestjs that provides some service to the user. User will select a plan,features will be accessible based on the limit set by plan. As an example: say there ...
varsha kumari's user avatar
0 votes
0 answers
10 views

How to implement restriction on accessing appliction feature based on plan

I am currently developing an application in nestjs, that provides services to the user. User selects a plan user will get access to features based on limit defined by plan. As an example: let us ...
varsha kumari's user avatar
0 votes
0 answers
20 views

Is it safe to delete this empty `google_storage_default_object_acl` with terraform?

I used terraformer to import my terraform state for an existing project. It's imported a long list of ACLs, many of which have no entities in the list: resource "google_storage_default_object_acl&...
thclark's user avatar
  • 4,814
0 votes
1 answer
80 views

Can I restrict my GCP resources(deployments/services/instances) based on IP range restricted to project/folder/org level?

I have applications deployed on GCP. My requirement is to: Restrict the above deployments based on the IP address originating from within a project/folder/Org level. So for example, If I have a GCP ...
rohit agrawal's user avatar
0 votes
1 answer
80 views

Property must be declared fileprivate because its type ... uses a private type

I just tried something to better understand access levels. In documentation for tuple's access level , there is a description from: The access level for a tuple type is the most restrictive access ...
Omer Tekbiyik's user avatar
1 vote
0 answers
22 views

How to use IAM tools such as auth0 to implement user access control in a SaaS product

Assumptions: My company provides 5 products (cloud-based web applications) I want to build a page for my client’s IT manager to manage the user access rights in his/her company. Example scenarios ...
hitheredude's user avatar
1 vote
2 answers
178 views

Fine-grained file access control and folder access permissions for fe_users in TYPO3

I'm facing a challenge with file access control in TYPO3, and I'm hoping to get some guidance or suggestions from the community. Problem: I need to implement a file access control system in TYPO3 ...
weiss's user avatar
  • 31
1 vote
1 answer
168 views

How to get data from Quizlet without API using Node.js

The Quizlet API has been dead for a while but I want to work on a project that uses their study sets. I spent a while trying to find an API to use but there were many misleading claims; some say the ...
Globe's user avatar
  • 169
0 votes
1 answer
86 views

Taking document ownership programatically in FileNet Content Engine 3.5

In an odd scenario where the creator of a document has explicitly removed all of the administrative groups thereby making the document effectively inaccessible, I am having to manually take control of ...
StackFN's user avatar
0 votes
0 answers
56 views

Define different access policy to macOS/iOS keychain items

I'd like to allow only a specific process to read sensitive items from keychain (based on process signature using method SecItemCopyMatching), and fail any other read attempt. Is it possible, what are ...
Zohar81's user avatar
  • 4,640
0 votes
2 answers
662 views

Proper usage of OAuth2 scopes

I‘m confused about the usage of OAuth2 scopes. From my understanding an OAuth2 scope is a permission granted by the end-user to an application to do something on their behalf. However, I've come ...
starboy's user avatar
0 votes
1 answer
180 views

Guidance about when to use UMA in Keycloak

I started using Keycloak and stumbled upon User-Managed Access (UMA) when trying to implement fine-grained access control. As far as I understand, UMA is an extension of OAuth2 that provides an ...
nailer_boxer's user avatar
1 vote
1 answer
624 views

What is the difference between roles and scopes in Azure's role-based access control (RBAC)?

I'm reading the What is Azure role-based access control (Azure RBAC)? article in the official docs, but it is hard to discern how scopes and roles are different. Read the following threads, but didn't ...
toraritte's user avatar
  • 6,394
0 votes
0 answers
55 views

Can't find any PIP implementations to power ABAC. Do any exist?

There seems to be a decent amount of work going on with ABAC, and there are many libraries that implement what seems to be basically the PDP portion of it: CASL https://casl.js.org/v5/en/guide/intro#...
rwusana's user avatar
  • 149
3 votes
0 answers
86 views

Does argument-dependent lookup also include overload set in inaccessible bases?

Here's a simple example: template<typename T> struct t1 : protected T { }; template<typename T> struct t2 { template<auto Index> struct inner : t1<T> { private:...
C0nstexpr's user avatar
0 votes
0 answers
28 views

Modifying access_control dynamically in Symfony 4.2

I'm working on a SAML SSO implementation with Symfony 4.2.12 and hslavich/OneloginSamlBundle, which could be enabled or disabled by the user. When enabled, I need to modify the security.yaml ...
xypher's user avatar
  • 51
0 votes
0 answers
262 views

Set Access-Control-Allow-Origin in Wordpress

I've already put the following guideline in the .htaccess of my Wordpress site: Header set Access-Control-Allow-Origin "'self' https://*.example.com" So that I can could avoid Cross-origin ...
Lucas Libório's user avatar
0 votes
0 answers
425 views

Ads - Blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource

I am seeing this error via Google inspect on my Wordpress website. Access to XMLHttpRequest at (ad lines I have removed) from origin 'https://www.awakenthegreatnesswithin.com' has been blocked by ...
Awaken The Greatness Within's user avatar
-4 votes
1 answer
84 views

Why you not use an open keyword with structs in swift? [closed]

everywhere talk about only classes with open/public keyword so it would be great if swift experts can provide satisfying answers with an example. for eg: we can do this in class but don't do it in the ...
yagnik suthar's user avatar
-1 votes
2 answers
498 views

I have problems with Post method in my CORS? [duplicate]

I am developing an app with my own sever, i configured my cors with to by client-side host only. Everything seems to be fine i can request data from my database using the GET, but whenever my trying ...
Cwei0's user avatar
  • 5
0 votes
1 answer
20 views

What are the best practices to create and manage users used in Google Compute Engine virtual machine

I am trying to create a gcp compute engine vm and create some users and user groups and define some folders and files and applications that are only accessible by certain users or groups. I did that ...
Zoodiac Diablo's user avatar
0 votes
1 answer
158 views

Can I grant admin access to an Azure resource group and Synapse workspace for an account in a different directory and subscription?

I have a resource group in one of my accounts that has Visual Studio Professional subscription. In the resource group I have several resources including a Synapse workspace. I have another account ...
Mons's user avatar
  • 1
1 vote
0 answers
44 views

Approaches for a Database Middleware

We are building a platform in form of a microservice architecture which shall be open to add services from several companies. The services shall use a common data warehouse (including a NoSQL database ...
Happyman's user avatar
1 vote
1 answer
74 views

How can I enable access only to a specific plugin (Newsletter) to a new user on the wordpress admin dashboard?

I am using the Newsletter plugin to send newsletters from my Wordpress website. I want to create a new user who can only access the Newsletter plugin and not have any other admin capability on the ...
Chetan's user avatar
  • 1,764
5 votes
1 answer
2k views

Symfony sensio/framework-extra-bundle is abandoned and i cannot find an IsGranted alternative

(on a Symfony 5.4 PHP 7.4 project) So far I am using IsGranted to restrict access in controllers per role. i.e. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted class PostController ...
pok_net's user avatar
  • 380
0 votes
1 answer
77 views

How do I add origin access control to S3 object within sceptre template?

I can use AWS console to follow directions and set up an S3 object behind CloudFront using an "origin access control." There's a trickiness in a certain ordering of creating and updating ...
Kevin S's user avatar
  • 497
1 vote
0 answers
180 views

Compine RBAC with ABAC casbin

I am quite new programmer and I need your help. I need to combine RBAC with ABAC. For the application requirements, imagine that we have some endpoints that some users with a specific role have access ...
Θοδωρής Σουλτανόπουλος's user avatar
0 votes
1 answer
225 views

Dynamic IAM Policy for DynamoDB

I am exploring fine-grained access for an API that we are building. APIs are hosted on API Gateway with a lambda handler and the datastore is DynamoDB. I need to apply row-level and attribute-level ...
praveenj's user avatar
  • 349
0 votes
0 answers
35 views

Field level protection for web api based on roles

I have an internal Web API which exposes JSON. I would like to expose some of the features based on roles of the authenticated user (or machine) from JWT or API-key. E.g internal API where filter....
Niklas Eldberger's user avatar
0 votes
0 answers
52 views

neo4j graphql @auth only read if relationship property is x

Inside @auth allow or where field, I would like to access the role of the user on PART_OF_TEAM to determine whether or not they should read/edit the posts. As an example: a user connected to a team ...
T P's user avatar
  • 21
0 votes
0 answers
15 views

Only allow traffic to web interface when coming from specifuc users/domains

I have two services that customers can use, dashboard.mydomain.com which is universal for all customers, and monitor.mydomain.com, which is the web interface of a device specific to the customer. Each ...
chaderis's user avatar
0 votes
3 answers
2k views

How to restrict access by particular user to bucket using bucket level policy in minio?

I am configuring minio as S3 compatible storage. Based on https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html I understood that I can limit access to the bucket using ...
gstackoverflow's user avatar
0 votes
1 answer
228 views

Which s3 policy types are supported in MINIO?

I am investigating minio. For now I have docker-compose with minio service and minio console is available for me. As I understand minio is kinda replacement for amazon s3. I've found the following ...
gstackoverflow's user avatar

1
2 3 4 5
28