#30004: Set default FILE_UPLOAD_PERMISSION to 0o644.
--------------------------------------+------------------------------------
     Reporter:  Evgeny Arshinov       |                    Owner:  nobody
         Type:  Cleanup/optimization  |                   Status:  new
    Component:  Documentation         |                  Version:  2.1
     Severity:  Normal                |               Resolution:
     Keywords:                        |             Triage Stage:  Accepted
    Has patch:  0                     |      Needs documentation:  0
  Needs tests:  0                     |  Patch needs improvement:  0
Easy pickings:  0                     |                    UI/UX:  0
--------------------------------------+------------------------------------

Comment (by Carlton Gibson):

 That note is referring to that non-leaf directories are created using the
 process `umask`.  (See
 [https://docs.python.org/3.7/library/os.html#os.makedirs `makedirs()`
 docs].) This is similar to `FILE_UPLOAD_PERMISSIONS`, when not using the
 temporary file upload handler.

 The underlying issue here is the **inconsistency** in file permissions,
 depending on the file size, when using **the default settings** that
 Django provides. There is no such inconsistency with directory
 permissions. As such changes should not be needed to
 `FILE_UPLOAD_DIRECTORY_PERMISSIONS`. (Any issues there would need to be
 addressed under a separate ticket.)

-- 
Ticket URL: <https://code.djangoproject.com/ticket/30004#comment:8>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.5542328eb47b142799ad36b182e83abc%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to