Re: Default upload permissions

2018-12-10 Thread Ira Abbott
I like this solution, as it applies the fix for new things moving forward with no change in behavior to cause problem for existing tweaked in sites. The most likely time to run in to this problem is, in my opinion, is when varying platforms or starting fresh projects. Once settled in to a

Re: Default upload permissions

2018-12-07 Thread René Fleschenberg
Hi, On 12/5/18 9:54 AM, Carlton Gibson wrote: > *Proposal*: we should change the default for FILE_UPLOAD_PERMISSION to > 0o644 (or maybe 0o664), and document that as a backward incompatible > change. This would be correct for almost all users.  If you're > deliberately leveraging

Re: Default upload permissions

2018-12-05 Thread Carlton Gibson
Hi all, This has come up again. So proposal below. https://code.djangoproject.com/ticket/30004 "Document TemporaryUploadedFile potential permission issues" Issue is that, with the default settings, you get 0o644 permissions for "small" files and 0o600 permissions for "big" ones. (Depending