For integration of Windows Services, the Agent Manager user requires permission to run the regedit.exe executable in export or import modes on one or more registry keys, under the
HKEY_LOCAL_MACHINE hive.
The Java EE Integration Agent automatically grants permissions on the files and directories within the DEPLOYMENT_DIRECTORY to be readable by any other user on the remote filesystem. By default, only users in the same group as the Agent Manager (and the Agent Manager user itself) can create files within the
DEPLOYMENT_DIRECTORY.
The setuid bit can be set on script files to have the launched process take on the user ID of the script file itself. This ability is not needed in stock integrations.
The setgid bit can be set on script files and directories. When set on script files, the effect is similar to the
setuid bit, except the launched process takes on the group ID of the script file, instead of the user ID. When set on a directory, the
setgid bit results in files created in that directory having the same group ownership as the directory itself, rather than the group of the user who creates the file. By default, the
setgid bit is set on Dynamic Directories, so that the Java EE Integration Agent can maintain these directories regardless of which user creates files within them.
The sticky bit can be used on directories with
other write permission to prevent a user from deleting another user’s file.
