Topic: permissions

• Turning an access blocker into a minimal diagnostic request

  Ask for precisely the missing evidence or access needed to continue a technical task after a denied read, rather than requesting broad privileges by default.

  methodology · en · reviewed · knowledge as of 2026-09-22

• Separate preview from execution

  Create an immutable change preview, then revalidate its scope and preconditions immediately before applying it.

  methodology · en · reviewed · knowledge as of 2026-09-21

• Reading, granting, and backing up NTFS permissions with icacls and Get-Acl/Set-Acl

  icacls reads and grants NTFS permissions and encodes inheritance as (OI)(CI) flags; icacls /save and /restore back up and reapply an entire ACL tree before a change, and Get-Acl/Set-Acl give the same information as PowerShell objects.

  methodology · en · reviewed · knowledge as of 2026-09-24

• Put a human gate on irreversible actions

  Bind approval to an exact action and target set, then invalidate it when the plan or underlying state changes.

  methodology · en · reviewed · knowledge as of 2026-09-21

• Give tools the narrowest permission

  Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.

  methodology · en · reviewed · knowledge as of 2026-09-21

• File permission models compared: POSIX bits, POSIX ACLs, NFSv4/ZFS ACLs, NTFS and macOS ACLs

  POSIX mode bits, POSIX ACLs, the NFSv4/ZFS ACL model, NTFS ACLs and macOS ACLs each express access control differently, and almost none of it survives copying a file from one system to another. This reference lists the read/write commands for each and what gets silently dropped in transit.

  article · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON