Permissions, second try

Previous topic

Setup & design

Next topic

Author	Message
Trond Åge Kvalø	Thursday 07 October 2004 2:06:18 am I have installed an eZ publish site on a shared host. I'd like to keep my files and directories non writeable for others (or world). On this host the apache user is nobody, thus all the files that I create with eZ publish are owned by nobody. When I login via a shell account I am myuser:myuser. Thus if I chown the var/ design/ and settings/ directories to nobody:nobody I won't be able to change files manually, and if I chown them to myuser:myuser eZpublish get permission errors. So what actions would you guys reccomend to remedy this situation? For now I've just done a chmod 777 on all the mentioned directories and subdirectories, which I believe is not the optimal solution. Any help is really appreciated. best regards trondåge
Marco Zinn	Saturday 09 October 2004 10:58:56 am Hi, as you are on a shared host, i guess, you cannot change much about users and user groups on that host. When apache runs as "nobody", then i guess, it's user group is "nobody", too. I'm not a *nix pro, but i fear, you can't do much here: As your shell/ftp user and the apache user "nobody" probably do not belong to the same user group, you need to grant write access to everyone. If you can, you should try to put your "webserver user" and your ftp or shell user into the same user group and grant write acccess to that group. Now, the good news: When you use ez 3.4, you will probably not need to change files by FTP or Shell anymore, as you can edit and create .ini files with the ezPublish admin interface (=the webserver's user). Marco http://www.hyperroad-design.com

Author

Message

Trond Åge Kvalø

Thursday 07 October 2004 2:06:18 am

I have installed an eZ publish site on a shared host.

I'd like to keep my files and directories non writeable for others (or world).

On this host the apache user is nobody, thus all the files that I create with eZ publish are owned by nobody.

When I login via a shell account I am myuser:myuser.

Thus if I chown the var/ design/ and settings/ directories to nobody:nobody I won't be able to change files manually, and if I chown them to myuser:myuser eZpublish get permission errors.

So what actions would you guys reccomend to remedy this situation? For now I've just done a chmod 777 on all the mentioned directories and subdirectories, which I believe is not the optimal solution.

Any help is really appreciated.

best regards

trondåge

Marco Zinn

Saturday 09 October 2004 10:58:56 am

Hi,
as you are on a shared host, i guess, you cannot change much about users and user groups on that host.

When apache runs as "nobody", then i guess, it's user group is "nobody", too.
I'm not a *nix pro, but i fear, you can't do much here: As your shell/ftp user and the apache user "nobody" probably do not belong to the same user group, you need to grant write access to everyone.
If you can, you should try to put your "webserver user" and your ftp or shell user into the same user group and grant write acccess to that group.

Now, the good news: When you use ez 3.4, you will probably not need to change files by FTP or Shell anymore, as you can edit and create .ini files with the ezPublish admin interface (=the webserver's user).

Marco
http://www.hyperroad-design.com

eZ debug

Timing:	Jan 18 2025 11:42:29
Script start
Timing:	Jan 18 2025 11:42:29
Module start 'layout'
Timing:	Jan 18 2025 11:42:29
Module start 'content'
Timing:	Jan 18 2025 11:42:30
Module end 'content'
Timing:	Jan 18 2025 11:42:30
Script end

Main resources:

Total runtime	0.9213 sec
Peak memory usage	4,096.0000 KB
Database Queries	54

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0184	587.9141	152.6250
Module start 'layout'	0.0184	0.0031	740.5391	39.4453
Module start 'content'	0.0215	0.8977	779.9844	523.5625
Module end 'content'	0.9191	0.0021	1,303.5469	8.1719
Script end	0.9212		1,311.7188

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0045	0.4870	16	0.0003
Check MTime	0.0016	0.1690	16	0.0001
Mysql Total
Database connection	0.0077	0.8374	1	0.0077
Mysqli_queries	0.8484	92.0883	54	0.0157
Looping result	0.0006	0.0665	52	0.0000
Template Total	0.8654	93.9	2	0.4327
Template load	0.0028	0.3091	2	0.0014
Template processing	0.8626	93.6281	2	0.4313
Template load and register function	0.0002	0.0225	1	0.0002
states
state_id_array	0.0018	0.1988	1	0.0018
state_identifier_array	0.0018	0.2004	2	0.0009
Override
Cache load	0.0022	0.2373	19	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0007	0.0773	2	0.0004
Fetch class attribute name	0.0015	0.1620	3	0.0005
XML
Image XML parsing	0.0007	0.0764	2	0.0004
class_abstraction
Instantiating content class attribute	0.0000	0.0017	3	0.0000
General
dbfile	0.0025	0.2764	16	0.0002
String conversion	0.0000	0.0010	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
2	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
3	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
1	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
2	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 10 Number of unique templates used: 6

Time used to render debug report: 0.0002 secs