easysoft / zentaopms

Zentao is an agile(scrum) project management system/tool, Free Upgrade Forever!​
http://www.zentao.pm
Other
1.29k stars 323 forks source link

directory permission #80

Closed netcrop closed 2 years ago

netcrop commented 2 years ago

During the fresh install of zentao 16.5 a warning shows up: " A tmp directory cannot be created. Make sure the directory zentaoalm/www/data exists and you have the right permission Command: chmod o=rwx -R zentaoalm/www/data" Why this directory and all files within requires "o=rwx" permission? if this is a upload directory, then what is the purpose of zentaoalm/www/data/upload ?

wwccss commented 2 years ago

The attatchment files need be uploaded to this directory, so requires o=rwx

netcrop commented 2 years ago

I see, only directory zentaoalm/www/data/upload needs o=rwx permissions, not zentaoalm/www/data/. because there are .js files within it and it's not safe to have .js files with o=rwx permissions. Am I right?

lanzongjun commented 2 years ago

You are right, but there is no zentaoalm/www/data/upload directory during the fresh install of zentao, so give zentaoalm/www/data directory permission

netcrop commented 2 years ago

Thanks! I will install the new version with this permissive permission and change it to a more restrictive permission afterwards.