Technology Tools for Ministry

Community

Web-Empowered Church User Community
Total Posts: 4 - Pages (1): [1]
user picture Author: Lyle Greg Lisle
Posted: Aug 02 2008 - 01:55 PM
Subject: Setting Access Rights
I'm somewhat nervous about setting all the access on my site to 777. Doesn't that give the world full read/write access to my site?

Any idea on how to set up a group without SSH?
Author: Jeff Segars
Posted: Aug 04 2008 - 09:53 AM
Subject: re: Setting Access Rights
Sounds like this is a moot point, right? From the other thread it appears that lowering the permissions allowed you to get things working.

Thanks,
Jeff
user picture Author: Lyle Greg Lisle
Posted: Aug 06 2008 - 05:11 PM
Subject: re: re: Setting Access Rights
Jeff Segars wrote:
Sounds like this is a moot point, right? From the other thread it appears that lowering the permissions allowed you to get things working.

Thanks,
Jeff


Yeah, it does seem to be moot. However, I am a bit confused about the whys and wherefores.
Why set the access to 777 at all?

Thanks anyway.
Greg
Author: Jeff Segars
Posted: Aug 06 2008 - 08:23 PM
Subject: re: Setting Access Rights
Greg,
Here's the background on why 777 would even be a reasonable idea to begin with

There are 4 directories within TYPO3 (fileadmin, typo3conf, typo3temp, and uploads) that need to be set up to allow write access from the web server. Depending on the server environment, Apache might be running as www, apache, nobody or as your username. If you've got root access to the server and technical expertise to know what user Apache is running as, then your best bet is to keep world privileges completely off and lock things down to the user and group that Apache is running under.

Most people in a typical shared hosting environment don't have the ability to tweak the permissions in this way, so running everything with full world permissions (777) ends up being the best option. In these environments, access is limited to the home directory of the current user so world permissions aren't quite as scary as they'd normally be.

Hope that explains some of our logic in recommending 777. Rather than being the best option 100% time, its a compromise to come up with a recommendation that will work for the vast majority of our users.

Thanks,
Jeff
Total Posts: 4 - Pages (1): [1]
You must login to post a message to this conference.