On Thu, 09 Jul 2009, Theodoropoulos Theodoros wrote:
> I uploaded several files (with bibupload, using FFT syntax) and I 
> realized that the actual files/directories were created with root:root 
> permissions (probably because it was root user that run bibupload). This 
> is OK in general, but later web-submitted actions with SRV/bibdocfile 
> for that record's docfile produce errors (permission denied).

Yes; the dirs had better be owned by (or made writable by) Apache.  In
the git/master version of CDS Invenio, we have improved user checking so
as to strictly enforce that bibsched tasks (including bibupload) would
run under the same user identity as the Apache application.  (See also
CFG_BIBSCHED_PROCESS_USER.)

Maybe we could go one step further and, as part of the installation
process, instruct how to create a new user called `invenio' and to run
the whole shebang under its identity...

Best regards
-- 
Tibor Simko ** CERN Document Server ** <http://cds.cern.ch/>

Reply via email to