Tag See all →

#permissions

2 stories

Banner: a key that fits a lock but is blocked by a filter plate over the keyhole

Security Bug Report

Linux Permission denied for a group member with an ACL grant: the ACL mask

John Nguyen · Jan 18, 2025 · 9 min read

Analysts had an explicit rwx ACL on a shared reports directory and still got Permission denied. A routine chmod 750 had quietly lowered the ACL mask, and files from the ETL job were born with a read-only mask. getfacl showed it all in one word: effective.

Banner: a GitHub Actions workflow token with read-only scope blocked from writing a pull request comment

DevOps & CI/CD Bug Report

GitHub Actions "Resource not accessible by integration" when commenting on PRs and pushing tags

Daniel Tran · Dec 10, 2024 · 8 min read

After moving repositories into a new GitHub organization, our coverage-comment and release-tag steps failed with 403 Resource not accessible by integration. The GITHUB_TOKEN defaulted to read-only. A scoped permissions block fixed it, and fork PRs needed a different design.