Hi, Ingo Jürgensmann kindly pointed me to the reason behind the bug: the uploads directory is created with root.www-data/rwx-wxr-x permissions, i.e. no read permissions for group www-data (Hmmm. Why Linux and/or POSIX says that in this case the "r" from the "other" rights shouldn't enable group www-data to read the dir is beyond me, but anyway ...)
cheers -- vbi -- featured product: GNU Privacy Guard - http://gnupg.org
signature.asc
Description: This is a digitally signed message part.
