commons-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark <>
Subject Re: Upload ownership problems
Date Tue, 25 Jul 2006 18:38:29 GMT
If you are authenticating users and Tomcat is running as root(bad idea
btw), then you should be able to chmod the file to the authenicated
Another idea is that if you are authenticating users, then the files
should go into a directory that the user has access to.  You could
even go one step further and only allow that user access to the
directory where they upload files.

On 7/25/06, Troy Davis <> wrote:
> Hello,
> I recently switched from a commercial upload bean to commons-
> fileupload, and am very happy with its performance except in one
> respect: File ownership rigidity. We're running Tomcat 5.5 with about
> 25 contexts (our clients). Tomcat is being run by root, so all of my
> upload directories must be owned by root for the upload to work for
> some reason. But at the same time, I need to allow users to use an
> FTP client to upload really large files, or delete old files that are
> no longer used. If the file was uploaded via http (using fileupload),
> this is not possible because the uploaded file will be owned by root.
> I've thought about several possible solutions, but they all have
> unwanted side effects:
> 1. Run a cron script to chown all files to root.user periodically,
> chmod g+w as well. The problem here is immediacy, FTP access to any
> files uploaded through a client's website will be owned by root.root,
> they won't be able to delete the file until the script runs next.
> 2. Set each Tomcat context to run as a different user. Sounds like
> the best approach, apache can do this, but I can't find any info on
> how to do it with Tomcat. Is this even possible?
> 3. Write a file manager app. This would eliminate the need for FTP
> access, but it would take a considerable amount of time to write the
> file manager app, test it and deploy.
> How have other fileupload users dealt with this problem?
> Thank You,
> Troy
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> For additional commands, e-mail:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message