Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-25595

Filesystem group permissions on storage files

    XMLWordPrintable

    Details

      Description

      Group users can't delete and manage cache/storage files. The permissions, being set 755, disallow group users to handle such files.

      steps to reproduce
      • install a fresh ezstudio 16.02 (with demo content)
      • verify the permission settings in web/var/site/storage/images/_aliases

      An alternative to setup less restrictive filesystem permissions is to document them as being like this and instructing site maintainers to ensure all cronjobs are executed by apache user.

        Attachments

          Issue Links

          discovered while testing

          Bug - A problem which impairs or prevents the functions of the product. EZP-24796 eZ Publish 5.4 installation documentation update with regards to security vulnerability CVE-2015-5723

          • High - Major loss of functionality.
          • Closed
          relates to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. EZP-25676 Update Flysystem to 1.0.x

          • High - Major loss of functionality.
          • Closed

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              joaquim.cavalleri-obsolete@ez.no Joaquim Cavalleri (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: