install:permissions
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
install:permissions [2015-05-07 03:51] – 190.242.40.82 | install:permissions [2023-12-12 16:17] (current) – Write access isn't enough, since that makes the DokuWiki pages load very slowly. antwoorden | ||
---|---|---|---|
Line 1: | Line 1: | ||
====== Setting up file permissions ====== | ====== Setting up file permissions ====== | ||
- | [[..:DokuWiki]] stores its data in plain text files. To be able to do this, DokuWiki needs sufficient permissions to write to these files. At the same time, leaving the permissions too loose can introduce security risks. | + | [[: |
DokuWiki is executed by PHP, so the PHP process needs to be able to write to these files. | DokuWiki is executed by PHP, so the PHP process needs to be able to write to these files. | ||
Line 11: | Line 11: | ||
* '' | * '' | ||
- | The following files are copied by the installer.php from the respective *.dist files and given the correct permissions for the web process automatically: | + | The following files are copied by the '' |
* '' | * '' | ||
- | * '' | + | * '' |
- | * '' | + | * '' |
* '' | * '' | ||
+ | |||
===== Windows (using Microsoft IIS) ===== | ===== Windows (using Microsoft IIS) ===== | ||
- | To make the files in the '' | + | To make the files in the '' |
- | Internet Guest Account ('' | + | Internet Guest Account ('' |
A good description with screenshots is available [[http:// | A good description with screenshots is available [[http:// | ||
Line 34: | Line 35: | ||
Note: Check out the web platform installer v3.0 for the necessary components and add IIS:IP and Domain Restrictions (under products) | Note: Check out the web platform installer v3.0 for the necessary components and add IIS:IP and Domain Restrictions (under products) | ||
- | Running **WIndows | + | Running **Windows |
Add a user as described above with the name: COMPUTERNAME\IUSER_COMPUTERNAME and give them full control. | Add a user as described above with the name: COMPUTERNAME\IUSER_COMPUTERNAME and give them full control. | ||
Full Computer Name is ComputerName.Domain.com and the Computer Name was just ComputerName without the domain. Used the Computer Name rather than the Full Computer Name. | Full Computer Name is ComputerName.Domain.com and the Computer Name was just ComputerName without the domain. Used the Computer Name rather than the Full Computer Name. | ||
Line 51: | Line 52: | ||
* Permissions for a file are dependent of the file's owner and group and the user who tries to access the file | * Permissions for a file are dependent of the file's owner and group and the user who tries to access the file | ||
* There are permissions for read, write and execute | * There are permissions for read, write and execute | ||
- | * Each UNIX process runs with the permissions of an OS user and his groups | + | * Each UNIX process runs with the permissions of an OS user and his/her groups |
* The web server is a UNIX process | * The web server is a UNIX process | ||
* PHP usually runs as part of the web server | * PHP usually runs as part of the web server | ||
Line 73: | Line 74: | ||
$group = $grp[' | $group = $grp[' | ||
}else{ | }else{ | ||
- | // try to create a file and read it' | + | // try to create a file and read its ids |
$tmp = tempnam ('/ | $tmp = tempnam ('/ | ||
$uid = fileowner($tmp); | $uid = fileowner($tmp); | ||
Line 103: | Line 104: | ||
| '' | | '' | ||
| '' | | '' | ||
- | | '' | + | | '' |
==== Which permissions to set? ==== | ==== Which permissions to set? ==== | ||
Line 135: | Line 136: | ||
by DokuWiki. | by DokuWiki. | ||
+ | ==== Tip: Using the setgid Bit ==== | ||
- | |||
- | ==== Tip: Using the setgid Bit ==== | ||
If you have commandline access to your server, you can use the '' | If you have commandline access to your server, you can use the '' | ||
* data directory: | * data directory: | ||
- | * '' | + | * '' |
* '' | * '' | ||
* everything below the data directory: | * everything below the data directory: | ||
Line 150: | Line 150: | ||
- | + | ===== How do I make specific pages in the wiki read-only? ===== | |
- | ===== How do I make spec page in the wiki read-only? ===== | + | |
See [[faq: | See [[faq: | ||
install/permissions.1430963513.txt.gz · Last modified: 2015-05-07 03:51 by 190.242.40.82