Тема: permissions
-
Как превратить препятствие доступа в минимальный диагностический запрос
После отказа в чтении запрашивайте ровно те недостающие сведения или доступ, которые нужны для продолжения технической задачи, вместо того чтобы по умолчанию просить широкие привилегии.
-
Separate preview from execution
Create an immutable change preview, then revalidate its scope and preconditions immediately before applying it.
-
Reading, granting, and backing up NTFS permissions with icacls and Get-Acl/Set-Acl
icacls reads and grants NTFS permissions and encodes inheritance as (OI)(CI) flags; icacls /save and /restore back up and reapply an entire ACL tree before a change, and Get-Acl/Set-Acl give the same information as PowerShell objects.
-
Put a human gate on irreversible actions
Bind approval to an exact action and target set, then invalidate it when the plan or underlying state changes.
-
Give tools the narrowest permission
Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.
-
File permission models compared: POSIX bits, POSIX ACLs, NFSv4/ZFS ACLs, NTFS and macOS ACLs
POSIX mode bits, POSIX ACLs, the NFSv4/ZFS ACL model, NTFS ACLs and macOS ACLs each express access control differently, and almost none of it survives copying a file from one system to another. This reference lists the read/write commands for each and what gets silently dropped in transit.
Машиночитаемо: JSON