#30004: Document TemporaryUploadedFile potential permission issues
-------------------------------------+-------------------------------------
     Reporter:  Evgeny Arshinov      |                    Owner:  nobody
         Type:                       |                   Status:  new
  Cleanup/optimization               |
    Component:  Documentation        |                  Version:  2.1
     Severity:  Normal               |               Resolution:
     Keywords:                       |             Triage Stage:
                                     |  Unreviewed
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------

Comment (by Evgeny Arshinov):

 Now that I think about, maybe Django could provide

 {{{
 # <Commentary about inconsistent permissions when this setting is omitted>
 FILE_UPLOAD_PERMISSINS=0o600
 }}}

 in the
 
[https://github.com/django/django/blob/master/django/conf/project_template/project_name/settings
 .py-tpl default project settings] so that developers don't miss it? `600`
 seems a reasonable default, particularly because people would get `600`
 anyway (at least on some operating systems) when the
 `TemporaryFileUploadHandler` is engaged.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/30004#comment:3>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.1e68e7f806975e703c168464b7c2009f%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to