Details
-
Bug
-
Resolution: Timed out
-
Medium
-
None
-
3.13.4
-
Windows Web Server 2008
-
3.13
-
Severity 2 - Major
-
-
Description
When attachments are uploaded, they are not incorporating the file permissions of the destination "attachments" folder. Instead, they are maintaining the permissions of the "temp" folder used by the email handler (and presumably the file upload handler as well).
A resolution to this problem is to reset the file permissions so they inherit the permissions of the destination folder. For an example, the built-in ICACLS command provides this functionality with the following command to replaces ACLs with default inherited ACLs:
ICACLS <filename> /reset
Background: After a recent hardware upgrade and OS reload, we have noticed problems backing up our attachments folder. It turns out the permissions of uploaded attachments were using the permissions from the "C:\Windows\Temp" folder. Windows maintains permissions of file when moving a file from one folder to another. (A "copy" operation, on the other hand, will use the permissions inherited by the destination folder.) As purely a workaround, we are now setting permissions on the window's temp folder as we need them in the attachments folder. This is clearly bad in general since the permissions will necessarily clash in some environments.