Article Permissions

Moderator: crythias

Locked
jeffbourassa
Znuny newbie
Posts: 12
Joined: 26 Jan 2013, 05:31
Znuny Version: 3.1.12
Real Name: Jeff Bourassa
Company: SMGI

Article Permissions

Post by jeffbourassa »

Hi All

We are reworking our article folder setup - we have a large article folder, many years and millions of articles.

Over the years we have avoided re-setting article folder permissions during the upgrades due to the number of files and folders. However we have upgraded to v6 now, and one of the leftover items is to check/validate the permissions on our articles, millions of them. It is time for a cleanup/check here.

We are thinking we do:

sudo chown -Rv otrs:www-data article
sudo chmod -Rv 2775 article

2775 might be more wide open than needed. However this seems to be the default based on a plain install of v6 for testing.

Any suggestions? Thoughts?


With thanks....

Jeff
root
Administrator
Posts: 4250
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Article Permissions

Post by root »

Hi Jeff,

my installations return 2770 for directories and 660 for files from the article directory. Permissions are usually set with otrs.SetPermissions.pl because it's not just a plain chmod, there's more inside ;-)

At least make sure that the otrs user and the web server user are able to read and write the same files, and are able to cd into the directories.

- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
jeffbourassa
Znuny newbie
Posts: 12
Joined: 26 Jan 2013, 05:31
Znuny Version: 3.1.12
Real Name: Jeff Bourassa
Company: SMGI

Re: Article Permissions

Post by jeffbourassa »

Thanks Roy....

We have been testing running otrs.SetPermissions.pl, and for whatever reason it is not resetting permissions in the article folder.

We have a non-standard article location though.

Do you know if the articles need to be in the standard location for the .pl script to know to find them?



Jeff
root
Administrator
Posts: 4250
Joined: 18 Dec 2007, 12:23
Znuny Version: Znuny and Znuny LTS
Real Name: Roy Kaldung
Company: Znuny
Contact:

Re: Article Permissions

Post by root »

jeffbourassa wrote: 10 Sep 2019, 21:19 We have a non-standard article location though.

Do you know if the articles need to be in the standard location for the .pl script to know to find them?
Jeff,

This script does not honor alternative locations. You have two possibilities:

- Relocate the article directory to the original location. But I suggest you have a good reason to use another location.
- Set the permissions like the script: Use 02755 for directories (https://github.com/OTRS/otrs/blob/rel-6 ... ns.pl#L198) and 0660 for regular files (https://github.com/OTRS/otrs/blob/rel-6 ... ns.pl#L193). Don't forget to set proper owner and user.

- Roy
Znuny and Znuny LTS running on CentOS / RHEL / Debian / SLES / MySQL / PostgreSQL / Oracle / OpenLDAP / Active Directory / SSO

Use a test system - always.

Do you need professional services? Check out https://www.znuny.com/

Do you want to contribute or want to know where it goes ?
Locked