Re: [MnITS-devel] Re: MnSt_Assignments.php

[John S. <sec...@pe...>]

Daniel Bartholomew <da...@pl...> writes:

 % > I then created the AssignmentUploads directory at the same level of
 % > MnITS and chmoded it to 777 and uploaded a test gif successfully. I
 % > verified that the upload was physically in the AssignmentUploads
 % > directory.

 I would SERIOUSLY suggest that we want to make sure that chmod 777 is
 not in the vocabulary of the project.

 Assignments can't afford to be writable by anyone but the core code.
 You really don't want other programs to give you access to the assignments. 


 We should assume that in the nominal case, this set of programs will
 at least run on a shared server between faculty. And that one faculty member
 should not be able to have code that pokes into the code on another site.

 Worst case, this is going to run on public servers, which give some pause about
 design.




-----
John Sechrest          .         Helping people use
CEO PEAK -              .           computers and the Internet
Public Electronic         .            more effectively
Access to Knowledge,Inc       .                      
1600 SW Western, Suite 180       .            Internet: sec...@pe...
Corvallis Oregon 97333               .                  (541) 754-7325
                                            . http://www.peak.org/~sechrest