CMS Made Simple Forums

Hi!

I cannot access certain files created by cmsms, namely FileManager uploads as well as auto-created thumbnails.

They show up okay on the website on FTP they are invisible.

After checking permissions and ownership I came to the following conclusion:

There are 2 owners and 2 groups in the provider's system
owners: w008**** and wwwrun (which would be for php scripts)
groups: w008**** and nogroup

So there exist directories with the following combination of owner/group:
(1) w008/w008 for FTP uploaded files
(2) wwwrun/w008 for cmsms-generated files like modules, tmp files and so on
(3) wwwrun/nogroup for FileManager uploads and thumbnails

The problem exists with (3).
When I log into the site with an FTP I am user w008 so I have access to (1)
Since user w008 is also in group w008 I have at least read access to (2)
But with an FTP login I have no access to (3) so I have no permissions whatsoever on these files.

So where do you suggest lies the problem? Is it in the way FileManager works or is my provider at fault?
Why does Filemanager create files in group nogroup but ModuleManager correctly creates wwwrun/w008-files?

This whole issue makes complete FTP backups impossible.

Very grateful for help,
Cerno

PS: I can manually reset the ownership and group of everything, but that won't work with automated updates, would it?

I just read the other thread on permissions and might have found a solution, but I'm not sure about possible safety risks.

I set umask to 018 instead of 022. This does not solve the problem described above (which might be a bug, who knows?) but it circumvents the problem by setting any cmsms-generated file to "readable by anyone".

I assume that this causes a security risk with cmsms-installed modules and the like but if I restrict the website mods to only uploading "safe" stuff like images it should be safe, right?

I still don't know what causes the weird w008/nogroup error (?) above, so if anyone could shed light on the matter I would be nice.

Cerno