[Vtigercrm-developers] Folder permissions to installation

[cryptic]

I've discovered there are a number of tweaks required if you use the file
permissions suggested by Matus

1. The .htaccess file in the modules directory should be modified as
follows-:

<Files *.php>
deny from all
</Files>
<Files "TrackAccess.php">
    Order Allow,Deny
    Allow from all
</Files>
<Files "ForgotPassword.php">
    Order Allow,Deny
    Allow from all
</Files>
<Files "api.php">
    Order Allow,Deny
    Allow from all
</Files>
<Files "CheckCaptcha.php">
    Order Allow,Deny
    Allow from all
</Files>
<Files "capture.php">
    Order Allow,Deny
    Allow from all
</Files>

The following vTiger features will not work if the aforementioned file is
not modified. This is because file access is denied-:

a) Email track access (the tracking of email access is not recorded)
b) Forgot password (when user clicks the link in the forgotten password
email)
c) Mobile app (unable to login to mobile app)
d & e) Webform capture (webform data will not be added to CRM as webform
capture fails).

2. I recommend modifying the owner for the user_privileges_* and
sharing_privileges_* files in the user_privileges directory to www-data.
Otherwise any profile/sharing rules updates will not be applied to the
necessary files.

3. Be aware that to update vTiger OR any extension it will be necessary to
temporarily change the owner to www-data otherwise the updates will not be
applied as www-data will not have write permission.



--
View this message in context: http://vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-Folder-permissions-to-installation-tp17012p18442.html
Sent from the vtigercrm-developers mailing list archive at Nabble.com.