{"id":54550,"date":"2019-12-29T00:00:00","date_gmt":"2019-12-28T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov"},"modified":"2020-02-18T14:02:34","modified_gmt":"2020-02-18T11:02:34","slug":"masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov","title":{"rendered":"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Z\u0159ejm\u011b m\u00e1m takovou karmu: realizovat standardn\u00ed \u00fakoly r\u016fzn\u00fdmi netradi\u010dn\u00edmi zp\u016fsoby. Pokud m\u00e1 n\u011bkdo jin\u00fd pohled na probl\u00e9m \u2013 zvu v\u00e1s k diskusi, abychom danou ot\u00e1zku probrali.<\/p>\n<p>Jednoho kr\u00e1sn\u00e9ho r\u00e1na se objevila zaj\u00edmav\u00e1 \u00faloha, jak p\u0159id\u011blit pr\u00e1va skupin\u00e1m u\u017eivatel\u016f na r\u016fzn\u00e9 sd\u00edlen\u00e9 slo\u017eky obsahuj\u00edc\u00ed podslo\u017eky projekt\u016f s dokumenty. V\u0161echno bylo v po\u0159\u00e1dku a byl naps\u00e1n skript, kter\u00fd p\u0159i\u0159azoval pr\u00e1va na slo\u017eky. A pak se uk\u00e1zalo, \u017ee skupiny mus\u00ed obsahovat u\u017eivatele z r\u016fzn\u00fdch dom\u00e9n, z r\u016fzn\u00fdch les\u016f (<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%98%D0%B5%D1%80%D0%B0%D1%80%D1%85%D0%B8%D1%8F_%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%BE%D0%B2_Active_Directory\">pro ty, kdo zapomn\u011bli, co to je<\/a><\/noindex>). P\u0159edpokl\u00e1dejme, \u017ee samotn\u00e1 sd\u00edlen\u00e1 slo\u017eka se nach\u00e1z\u00ed na za\u0159\u00edzen\u00ed Synology, registrovan\u00e9m v dom\u00e9n\u011b FB, lesa PSI. \u00dakol: povolit u\u017eivatel\u016fm <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/domain\/\"   title=\"dom\u00e9n.\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3150\">dom\u00e9n.<\/a> jin\u00e9ho lesa p\u0159\u00edstup k obsahu t\u00e9to sd\u00edlen\u00e9 slo\u017eky, a to velmi selektivn\u011b.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nZad\u00e1n\u00ed se po n\u011bjak\u00e9 dob\u011b vyjasnilo v n\u00e1sleduj\u00edc\u00ed podob\u011b:<\/p>\n<ul>\n<li>2 lesy: Les PSI, les TG.\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/93e3095a3ea613299c89b81379ea2731.png\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>V ka\u017ed\u00e9m lese jsou 3 dom\u00e9ny: PSI (ZG, PSI, FB); TG (TG, HU, KC).<\/li>\n<li>Mezi lesy \u2013 d\u016fv\u011bryhodn\u00e9 vztahy, Synology vid\u00ed v\u0161echny skupiny Security ve v\u0161ech les\u00edch.<\/li>\n<li>Na sd\u00edlen\u00fdch slo\u017ek\u00e1ch a slo\u017ek\u00e1ch\/podslo\u017ek\u00e1ch mus\u00ed b\u00fdt nutn\u011b \u00fa\u010dty administr\u00e1tor\u016f dom\u00e9ny FB s pr\u00e1vy FullControl.<\/li>\n<li>N\u00e1zvy slo\u017eek sd\u00edlen\u00e9 slo\u017eky mus\u00ed b\u00fdt systematizov\u00e1ny. Sjedn\u00e1v\u00e1n\u00ed ID projekt\u016f bylo provedeno veden\u00edm, rozhodl jsem se n\u00e1zvy skupin Security p\u0159i\u0159adit k ID projekt\u016f.<\/li>\n<li>Slo\u017eky projekt\u016f ve syst\u00e9mov\u00fdch sd\u00edlen\u00fdch slo\u017ek\u00e1ch mus\u00ed obsahovat p\u0159edem p\u0159ipravenou strukturu v .xlsx souboru, se odpov\u00eddaj\u00edc\u00edmi privilegii p\u0159\u00edstupu (R\/RW\/NA, kde NA \u2013 p\u0159\u00edstup nen\u00ed k dispozici).\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/b2b544cd9dfc784caeb23564a9e8e1b7.png\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>Mus\u00ed b\u00fdt mo\u017en\u00e9 omezit pr\u00e1va u\u017eivatel\u016f\/\u010dlen\u016f skupiny jednoho projektu pouze na ur\u010dit\u00e9 adres\u00e1\u0159e dan\u00e9ho projektu. K dal\u0161\u00edm adres\u00e1\u0159\u016fm\/projekt\u016fm nemus\u00ed m\u00edt u\u017eivatel p\u0159\u00edstup v z\u00e1vislosti na \u010dlenstv\u00ed ve skupin\u00e1ch.<\/li>\n<li>P\u0159i zakl\u00e1d\u00e1n\u00ed slo\u017eky projektu by m\u011bly b\u00fdt maxim\u00e1ln\u011b automaticky vytv\u00e1\u0159eny skupiny ve odpov\u00eddaj\u00edc\u00edch dom\u00e9n\u00e1ch, kter\u00e9 nesou n\u00e1zvy odpov\u00eddaj\u00edc\u00ed ID projekt\u016f.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Pozn\u00e1mky k zad\u00e1n\u00ed<\/h4>\n<p><\/p>\n<ul>\n<li>Nastaven\u00ed d\u016fv\u011bryhodn\u00fdch vztah\u016f nen\u00ed sou\u010d\u00e1st\u00ed zad\u00e1n\u00ed.<\/li>\n<li>ID projektu obsahuje \u010d\u00edslice a latinku.<\/li>\n<li>Role u\u017eivatel\u016f projekt\u016f pro v\u0161echny dom\u00e9ny maj\u00ed typick\u00e1 n\u00e1zvy.<\/li>\n<li>Soubor .xlsx se slo\u017ekami a pr\u00e1vy p\u0159\u00edstupu (matice p\u0159\u00edstupu) je p\u0159ipravov\u00e1n p\u0159ed za\u010d\u00e1tkem realizace cel\u00e9ho projektu.<\/li>\n<li>P\u0159i realizaci projekt\u016f je mo\u017en\u00e9 vytv\u00e1\u0159en\u00ed skupin u\u017eivatel\u016f v odpov\u00eddaj\u00edc\u00edch dom\u00e9n\u00e1ch.<\/li>\n<li>Automatizace je dosa\u017eeno pomoc\u00ed standardn\u00edch prost\u0159edk\u016f administrace MS Windows<\/li>\n<\/ul>\n<p><\/p>\n<h4>Realizace technick\u00e9ho zad\u00e1n\u00ed<\/h4>\n<p>\nPo form\u00e1ln\u00edm stanoven\u00ed t\u011bchto po\u017eadavk\u016f byla u\u010din\u011bna taktick\u00e1 pauza na vyzkou\u0161en\u00ed metod vytv\u00e1\u0159en\u00ed katalog\u016f a jejich p\u0159id\u011blov\u00e1n\u00ed pr\u00e1v. Pou\u017e\u00edvat se m\u011bl pouze PowerShell, aby se projekt nekomplikoval. Jak jsem ji\u017e d\u0159\u00edve zmi\u0148oval, algoritmus skriptu se zd\u00e1l b\u00fdt dostate\u010dn\u011b jednoduch\u00fd: <\/p>\n<ul>\n<li>registrujeme skupiny nazvan\u00e9 podle ID projektu (nap\u0159\u00edklad KC40587) a odpov\u00eddaj\u00edc\u00ed role uveden\u00e9 v matici p\u0159\u00edstupu: KC40587-EN- pro in\u017een\u00fdra; KC40587-PM \u2013 pro produktov\u00e9ho mana\u017eera atd.<\/li>\n<li>z\u00edsk\u00e1v\u00e1me SID vytvo\u0159en\u00fdch skupin<\/li>\n<li>registrujeme slo\u017eku projektu a odpov\u00eddaj\u00edc\u00ed sadu katalog\u016f (seznam podadres\u00e1\u0159\u016f z\u00e1vis\u00ed na sd\u00edlen\u00ed, v n\u011bm\u017e je vytv\u00e1\u0159en a je definov\u00e1n v matici p\u0159\u00edstupu)<\/li>\n<li>na nov\u00e9 podadres\u00e1\u0159e projektu p\u0159id\u011blujeme pr\u00e1va skupin\u00e1m podle matice p\u0159\u00edstupu.<\/li>\n<\/ul>\n<p>\nObt\u00ed\u017ee, kter\u00fdm jsme \u010delili v 1. f\u00e1zi: <\/p>\n<ul>\n<li>nepochopen\u00ed zp\u016fsobu zad\u00e1v\u00e1n\u00ed matice p\u0159\u00edstupu ve skriptu (nyn\u00ed je realizov\u00e1n v\u00edcerozm\u011brn\u00fd pole, ale hled\u00e1 se zp\u016fsob jeho vypln\u011bn\u00ed na z\u00e1klad\u011b obsahu .xlsx souboru\/matice p\u0159\u00edstupu)\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/e5f37b97998a603b85276093ed053347.png\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>nemo\u017enost p\u0159id\u011blovat p\u0159\u00edstupov\u00e1 pr\u00e1va ve SMB sd\u00edlen\u00edch na \u00falo\u017ei\u0161t\u00edch Synology pomoc\u00ed prost\u0159edk\u016f PoSH (https:\/\/social.technet.microsoft.com\/Forums\/en-US\/3f1a949f-0919-46f1-9e10-89256cf07e65\/error-using-setacl-on-nas-share?forum=winserverpowershell), kv\u016fli \u010demu\u017e byla ztracena spousta \u010dasu a bylo nutn\u00e9 p\u0159izp\u016fsobit v\u0161e skript\u016fm s pou\u017eit\u00edm n\u00e1stroje pro \u00fapravu p\u0159\u00edstupov\u00fdch pr\u00e1v icacls, co\u017e vy\u017eadovalo vytvo\u0159en\u00ed mezistup\u0148ov\u00e9ho \u00falo\u017ei\u0161t\u011b textov\u00fdch a cmd soubor\u016f. <\/li>\n<\/ul>\n<p>\nV aktu\u00e1ln\u00edm re\u017eimu je prov\u00e1d\u011bn\u00ed cmd soubor\u016f kontrolov\u00e1no ru\u010dn\u011b, v p\u0159\u00edpad\u011b pot\u0159eby registrace slo\u017eky pro projekt.<\/p>\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/0ef37fca03aa7005269494a474bab857.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u00e9 se uk\u00e1zalo, \u017ee skript mus\u00ed b\u00fdt prov\u00e1d\u011bn i pro registraci skupin v jin\u00fdch les\u00edch (pou\u017e\u00edvali jsme term\u00edn Cross-domains), p\u0159i\u010dem\u017e pom\u011br nemus\u00ed b\u00fdt pouze 1 k 1, ale i 1 k mnoha. <\/p>\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/14dbad219db9420c446e18695e436e5f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTo znamen\u00e1, \u017ee na p\u0159\u00edstup k prost\u0159edk\u016fm n\u011bjak\u00e9 dom\u00e9ny nyn\u00ed mohou \u017e\u00e1dat skupiny z jin\u00fdch kros-domen, v\u010detn\u011b sousedn\u00edho lesa. Pro zaji\u0161t\u011bn\u00ed jednotnosti bylo rozhodnuto o vytvo\u0159en\u00ed symetrick\u00e9 struktury v OU v\u0161ech obsluhovan\u00fdch dom\u00e9n v\u0161ech les\u016f (\u010dern\u00e9 vertik\u00e1ln\u00ed ov\u00e1ly). Jak se \u0159\u00edk\u00e1, v arm\u00e1d\u011b by m\u011blo b\u00fdt v\u0161e chaotick\u00e9, ale jednotn\u00e9:<\/p>\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/5f43af34428abca8e3ee21f6144595b3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n <br \/>\nP\u0159i registraci projektu 80XXX v dom\u00e9n\u011b TG skript prov\u00e1d\u00ed: <\/p>\n<p>1. vytvo\u0159en\u00ed odpov\u00eddaj\u00edc\u00ed OU (\u010derven\u00e9 vodorovn\u00e9 ov\u00e1ly) v t\u00e9to dom\u00e9n\u011b a cross-dom\u00e9n\u00e1ch, tedy v t\u011bch dom\u00e9n\u00e1ch, jejich\u017e zam\u011bstnanci by m\u011bli m\u00edt p\u0159\u00edstup k tomuto zdroji.<\/p>\n<p>2. napln\u011bn\u00ed OU skupinami s n\u00e1zvy ve form\u00e1tu &lt;SRC_domain&gt;&lt;DST_domain&gt;&lt;ID_project&gt;-, kde:<\/p>\n<ul>\n<li>SRC_domain \u2013 cross-dom\u00e9na, jej\u00ed\u017e zam\u011bstnanci budou m\u00edt p\u0159\u00edstup k prost\u0159edk\u016fm dom\u00e9ny DST<\/li>\n<li>DST_domain \u2013 dom\u00e9na, k jej\u00edm\u017e prost\u0159edk\u016fm by m\u011bl b\u00fdt p\u0159\u00edstup poskytnut, tedy pro\u010d se to cel\u00e9 d\u011bl\u00e1 <\/li>\n<li>&lt;ID_project&gt; \u2014 \u010d\u00edslo projektu<\/li>\n<li>ROLES \u2013 n\u00e1zvy rol\u00ed uveden\u00e9 v matici p\u0159\u00edstupu.<\/li>\n<\/ul>\n<p>\n3. p\u0159e\u010dten\u00ed pole SID v\u0161ech skupin v\u0161ech z\u00fa\u010dastn\u011bn\u00fdch dom\u00e9n a jeho ulo\u017een\u00ed pro n\u00e1sledn\u00fd p\u0159enos dat do souboru, kter\u00fd definuje pr\u00e1va na konkr\u00e9tn\u00ed podslo\u017eku projektu<\/p>\n<p>4. generov\u00e1n\u00ed zdrojov\u00fdch soubor\u016f (parametr \/restore) s sadou pr\u00e1v pro pou\u017eit\u00ed utilitou icacKC v re\u017eimu spustiteln\u00e9ho souboru \"icacKC 'as-nasNNKCProjects' \/restore C:TempKCKC40XXKC40XX.txt\"<\/p>\n<p>5. vytvo\u0159en\u00ed souboru CMD, kter\u00fd spojuje v\u0161echny spou\u0161t\u011bn\u00e9 icacls pro v\u0161echny slo\u017eky projektu<\/p>\n<p><img decoding=\"async\" alt=\"Hromadn\u00e9 nastaven\u00ed pr\u00e1v pro u\u017eivatele dom\u00e9n z r\u016fzn\u00fdch les\u016f\" src=\"\/wp-content\/uploads\/2019\/12\/6bb132cfc7568de52ea162fdecbf2a85.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak bylo uvedeno d\u0159\u00edve, spu\u0161t\u011bn\u00ed spustiteln\u00e9ho souboru se prov\u00e1d\u00ed ru\u010dn\u011b a hodnocen\u00ed v\u00fdsledk\u016f proveden\u00ed se tak\u00e9 prov\u00e1d\u00ed ru\u010dn\u011b.<\/p>\n<p>Obt\u00ed\u017ee, se kter\u00fdmi se ve skute\u010dnosti setkali: <\/p>\n<ul>\n<li>pokud je slo\u017eka projektu ji\u017e napln\u011bna velk\u00fdm mno\u017estv\u00edm soubor\u016f, pak proveden\u00ed p\u0159\u00edkazu icacls na existuj\u00edc\u00edch objemech m\u016f\u017ee trvat zna\u010dnou dobu, a v n\u011bkter\u00fdch p\u0159\u00edpadech vedlo k selh\u00e1n\u00ed (nap\u0159\u00edklad p\u0159i p\u0159\u00edtomnosti dlouh\u00fdch cest k soubor\u016fm);<\/li>\n<li>krom\u011b parametru \/restore bylo nutn\u00e9 p\u0159idat \u0159\u00e1dky s parametrem \/reset pro p\u0159\u00edpad, \u017ee by slo\u017eky nebyly vytvo\u0159eny, ale byly p\u0159esunuty z ji\u017e existuj\u00edc\u00edch slo\u017eek, s vypnut\u00fdmi pr\u00e1vy d\u011bdi\u010dnosti z ko\u0159ene;<\/li>\n<li> \u010d\u00e1st skriptu pro vytv\u00e1\u0159en\u00ed skupin bylo nutn\u00e9 spustit na libovoln\u00e9m dc ka\u017ed\u00e9ho lesa, probl\u00e9m se t\u00fdk\u00e1 u\u017eivatelsk\u00fdch administrativn\u00edch \u00fa\u010dt\u016f pro ka\u017ed\u00fd strom.<\/li>\n<\/ul>\n<p>\nObecn\u00fd z\u00e1v\u011br: je velmi podivn\u00e9, \u017ee na trhu zat\u00edm nejsou n\u00e1stroje s podobnou funk\u010dnost\u00ed. Realizace podobn\u00e9 funk\u010dnosti na b\u00e1zi port\u00e1lu Sharepoint se jev\u00ed jako mo\u017en\u00e1.<br \/>\nTak\u00e9 se zd\u00e1 b\u00fdt nejasn\u00e9, pro\u010d nen\u00ed mo\u017en\u00e9 pou\u017e\u00edvat PoSH n\u00e1stroje pro nastaven\u00ed pr\u00e1v na slo\u017eku na za\u0159\u00edzen\u00edch sinology.<\/p>\n<p>Pokud by m\u011bl kdokoli z\u00e1jem, jsem ochoten sd\u00edlet skript vytvo\u0159en\u00edm projektu na github.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/482130\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0438\u0434\u0438\u043c\u043e \u0443 \u043c\u0435\u043d\u044f \u043a\u0430\u0440\u043c\u0430 \u0442\u0430\u043a\u0430\u044f: \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0441\u044f\u043a\u0438\u043c\u0438 \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0443 \u043a\u043e\u0433\u043e-\u0442\u043e \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u043e\u0435 \u0432\u0438\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2014 \u043f\u0440\u043e\u0448\u0443 \u0432 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435, \u0434\u043b\u044f \u043f\u0440\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u0430. \u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0443\u0442\u0440\u043e\u043c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u0440\u0430\u0437\u0434\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0440\u0430\u0437\u043d\u044b\u0435 \u0448\u0430\u0440\u044b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043f\u043e\u0434\u043f\u0430\u043f\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043f\u0430\u043f\u043a\u0430\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u0412\u0441\u0435 \u0431\u044b\u043b\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u0438 \u0431\u044b\u043b \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u043f\u0430\u043f\u043a\u0438. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54550","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0438\u0434\u0438\u043c\u043e \u0443 \u043c\u0435\u043d\u044f \u043a\u0430\u0440\u043c\u0430 \u0442\u0430\u043a\u0430\u044f: \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0441\u044f\u043a\u0438\u043c\u0438 \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u043b\u0435\u0441\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0438\u0434\u0438\u043c\u043e \u0443 \u043c\u0435\u043d\u044f \u043a\u0430\u0440\u043c\u0430 \u0442\u0430\u043a\u0430\u044f: \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0441\u044f\u043a\u0438\u043c\u0438 \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-12-28T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:02:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rozs\u00e1hl\u00e9 p\u0159i\u0159azen\u00ed opr\u00e1vn\u011bn\u00ed u\u017eivatel\u016f dom\u00e9n z r\u016fzn\u00fdch les\u016f | ProHoster","description":"Z\u0159ejm\u011b m\u00e1m takovou karmu: \u0159e\u0161it standardn\u00ed \u00fakoly r\u016fzn\u00fdmi netradi\u010dn\u00edmi zp\u016fsoby.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u043b\u0435\u0441\u043e\u0432 | ProHoster","og:description":"\u0412\u0438\u0434\u0438\u043c\u043e \u0443 \u043c\u0435\u043d\u044f \u043a\u0430\u0440\u043c\u0430 \u0442\u0430\u043a\u0430\u044f: \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432\u0441\u044f\u043a\u0438\u043c\u0438 \u043d\u0435\u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/masshtabnoe-naznachenie-prav-na-polzovatelej-domenov-iz-raznyh-lesov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-28T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54550","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-11 11:18:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:03:56","updated":"2026-02-11 11:18:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=54550"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54550\/revisions"}],"predecessor-version":[{"id":160543,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54550\/revisions\/160543"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=54550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=54550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=54550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}