From: Wolfgang M. <wol...@ex...> - 2011-10-18 11:25:37
|
> +1 to keep this feature. What security issue? human? let move it to mars then .... =) Well, what's the consequence of disabling the configurable default permissions? In the end, we'll need to introduce some mechanism to allow the user to change the permissions of uploaded resources. I already changed the package repository installer to automatically set +x on all xquery resources you upload. So in a way we're just moving the problem into the user interface. We need to extend every interface to allow the user to specify default permissions. Somehow, the old mechanism of defining default permissions on a collection basis was more consistent and thus, one could argue: more secure. Wolfgang |