Vote up!
Vote down!

Site wide permissions?

Hello. I am a bit overwhelmed and seeking direction. My security review shows massive amounts of files that need permissions changed. I have searched extensively and can find no references.

1) Is there a list for correct permission on files and folders for commerce kickstart 2?
2) Is there a script that will accomplish this? Did the install give correct permissions, and the security review is full of false alarms?
3) I am aware of files needing 644 and folders 755. But why does the install 'not' have these set automatically to help make the site secure?

I can not imagine having to change so many files one by one, or even recursively by folder. Any help is mega appreciated. Thank you!

Asked by: kc bme
on September 19, 2014

2 Answers

Vote up!
Vote down!


Yeah this can be a common frustration. Often not the result of the installer getting wrong, just the way you copied the files to the server to begin with being "weird."

Best documentation for file permissions: https://www.drupal.org/node/244924 (this applies to all of Drupal 7, not just Kickstart 2) Note also, near the bottom, there's a few scripts you can try to run to automate the correct permissions.

There are also some really helpful scripts here as well: http://drupal.stackexchange.com/questions/373/what-are-the-recommended-d...

Josh Miller
Answer by: Josh Miller
Posted: Sep 19, 2014
Vote up!
Vote down!

Thank you Josh. Ive seen that link many times. It appears that all my permissions are set correctly, yet the security reviews list multiple amounts of permission errors. So i am still at a loss.

Answer by: kc bme
Posted: Sep 20, 2014