{"record":{"id":"f56a63b7c2f7c4e3","repo":"portainer/portainer","slug":"privileged-mode-disabled-for-non-administrator-use","errorCode":null,"errorMessage":"privileged mode disabled for non administrator users","messagePattern":"privileged mode disabled for non administrator users","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"api/stacks/stackutils/validation.go","lineNumber":76,"sourceCode":"\t\t\t}\n\n\t\t\tif isBind {\n\t\t\t\treturn fmt.Errorf(\"volume %q: bind-mount disabled for non administrator users\", volumeKey)\n\t\t\t}\n\t\t}\n\t}\n\n\tfor _, service := range composeConfig.Services {\n\t\tif !config.SecuritySettings.AllowBindMountsForRegularUsers {\n\t\t\tfor _, volume := range service.Volumes {\n\t\t\t\tif docker.IsBindMount(docker.MountDescriptor{Type: volume.Type}) {\n\t\t\t\t\treturn errors.New(\"bind-mount disabled for non administrator users\")\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif !config.SecuritySettings.AllowPrivilegedModeForRegularUsers && service.Privileged {\n\t\t\treturn errors.New(\"privileged mode disabled for non administrator users\")\n\t\t}\n\n\t\tif !config.SecuritySettings.AllowHostNamespaceForRegularUsers && service.Pid == \"host\" {\n\t\t\treturn errors.New(\"pid host disabled for non administrator users\")\n\t\t}\n\n\t\tif !config.SecuritySettings.AllowDeviceMappingForRegularUsers && len(service.Devices) > 0 {\n\t\t\treturn errors.New(\"device mapping disabled for non administrator users\")\n\t\t}\n\n\t\tif !config.SecuritySettings.AllowSysctlSettingForRegularUsers && len(service.Sysctls) > 0 {\n\t\t\treturn errors.New(\"sysctl setting disabled for non administrator users\")\n\t\t}\n\n\t\tif !config.SecuritySettings.AllowSecurityOptForRegularUsers && len(service.SecurityOpt) > 0 {\n\t\t\treturn errors.New(\"security-opt setting disabled for non administrator users\")\n\t\t}\n","sourceCodeStart":58,"sourceCodeEnd":94,"githubUrl":"https://github.com/portainer/portainer/blob/17e74456ff6e794b9d5439ec3fa06922aa18a3f8/api/stacks/stackutils/validation.go#L58-L94","documentation":"Error \"privileged mode disabled for non administrator users\" thrown in portainer/portainer.","triggerScenarios":"Thrown at api/stacks/stackutils/validation.go:76 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"17e74456ff6e794b9d5439ec3fa06922aa18a3f8","analyzedAt":"2026-08-26T23:09:01.915Z","schemaVersion":2},"datasetVersion":"2026-08-27T03:17:27.898Z"}