On Sunday, December 12, 2010 10:27:56 PM UTC+2, Javier Garcia wrote:
Yes, you are right, I have tried it and it gives me an error about the
permissions of the file. But, what is the "web process"? the www-data
user? You say also "depending n your setup", so is there any setup
process that allow to configure the permissions to the security files?
Im just curious..

The web process = apache server process. Usually runs under
www-data:www-data (user:group) on Debian based systems.
It is possible to log in as that user and do the deployment as www-data
so all your project files belong to this user
and there should be no problem writing to the security.yml files.

I'm not sure if this is recommended from a security point of view but
it is certainly possible.


I'm not sure if you're right..I didn't need to do "cc" to change the
credentials of an action.

sf 1.4/propel

Hmmm, were you using frontend_dev (the debug controller)?
A cache file is generated out of all those security.yml files for each
module,
i don't think the cache file is regenerated when using the production
controller.


gabriel

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en

Reply via email to