Contrib.social

Do not automatically rewrite file and directory permissions (only check and ask instead)

Open on Drupal.org →
Created on 4 June 2012, almost 13 years ago
Updated 14 March 2025, about 2 months ago

Spin-off from #1611686: Add test for unprotected settings.local.php → :

Problem

  • File and directory permissions (especially for settings.local.php) might be purposively writable, but Drupal automatically changes the permissions.

Goal

  • Only warn about permissions. Provide a link or button to change them.
    Or to quote @Dries:

    A better pattern may be this: if Drupal identifies that the files are not properly secured, there could be a "Fix permissions" link or button in the warning message, that executes a callback that will try to fix the permissions. Like that, Drupal doesn't automatically fix the permissions but still makes it very easy for people to (try and) get their permissions fixed.

📌 Task
Status

Postponed: needs info

Version

11.0 🔥

Component

install system

Created by

🇩🇪Germany sun Karlsruhe

Live updates comments and jobs are added and updated live.
  • stale-issue-cleanup

    To track issues in the developing policy for closing stale issues, [Policy, no patch] closing older issues

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment about 2 months ago →
    🇺🇸United States smustgrave

    Thank you for creating this issue to improve Drupal.

    We are working to decide if this task is still relevant to a currently supported version of Drupal. There hasn't been any discussion here for over 8 years which suggests that this has either been implemented or is no longer relevant. Your thoughts on this will allow a decision to be made.

    Since we need more information to move forward with this issue, the status is now Postponed (maintainer needs more info). If we don't receive additional information to help with the issue, it may be closed after three months.

    Thanks!

  • Comment about 2 months ago →
    🇩🇪Germany geek-merlin Freiburg, Germany

    Imho this is obsoleted by the long-fixed related issue.

  • Comment about 2 months ago →
    🇬🇧United Kingdom catch

    Was about to say this still sounds like a good idea, but that setting covers it.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024