ProductCart Shopping Cart Software Forums : Read/Write Folder Permissions https://forum.productcart.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sun, 12 Apr 2026 00:08:28 +0000 Tue, 13 Mar 2012 00:32:03 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.productcart.com/RSS_post_feed.asp?TID=5038 <![CDATA[ProductCart Shopping Cart Software Forums]]> https://forum.productcart.com/forum_images/pc_logo_50.png https://forum.productcart.com/ <![CDATA[Read/Write Folder Permissions : robguay wrote: Which folders...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19291.html#19291 Author: Guests
Subject: 5038
Posted: 13-March-2012 at 12:32am

Originally posted by robguay robguay wrote:

Which folders are absolutley required to have write permissions?

Ok, @robguay, the "big wigs" here have weighed in (Hamish, Greg/GBDG, Sean/WMS): do you still have a concern here? We think you shouldn't.

Personally, I think you should not waste any development juice getting hung up here and just go build yourself an awesome store.

ON a side note, though, perhaps your real concern here should be on how to clean up on a lot of those files that get written temporarily. Greg's been an "advanced guard" on that issue, and WMS has worked on this issue as well. Not a big deal, but more of a concern than the required permissions issues.
]]> Tue, 13 Mar 2012 00:32:03 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19291.html#19291 <![CDATA[Read/Write Folder Permissions : Agreed. When one configures this...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19289.html#19289 Author: Greg Dinger
Subject: 5038
Posted: 13-March-2012 at 12:11am

Agreed.  When one configures this or that, various settings files get written.  Generate a store map or category navigation and more files are written.  Ship orders and shipping label-related files are produced.  It goes on and on.  
 
It would be extremely laborious to try to work through the entire list of files that the system might eventually want to tough, and to try to granularly set the permissions on every possible file that needs to be touched.
]]> Tue, 13 Mar 2012 00:11:42 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19289.html#19289 <![CDATA[Read/Write Folder Permissions : Dayv3 wrote: &#034;Set...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19287.html#19287 Author: Guests
Subject: 5038
Posted: 13-March-2012 at 12:05am

Originally posted by Dayv3 Dayv3 wrote:


"Set the following folder permissions for the “Internet User” (IUSR) or the “Everyone”:
  • READ/WRITE on the productcart folder and all of its files and folders.

This wouldn't/shouldn't work as the /includes/ and /"pcadmin"/ directories need "modify"/"delete" permissions. "Read/Write" permissions on the entire application is not sufficient, and maybe not the best idea.

What's more, my earlier post assumed @robguay thought the permissions were too loose and wanted to ratchet them down. I think this is what Hamish thought as well. However, I didn't flush out that take on it well enough "at the file level" as the issue there would mean rather significantly altering PC to find the files it needs to write and modify in directories one would have to custom create and then go modify the application for (and maintain with upgrades, etc.). Just doesn't seem remotely worth it when there is no real security issue here. 

]]> Tue, 13 Mar 2012 00:05:27 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19287.html#19287 <![CDATA[Read/Write Folder Permissions : &#034;Set the following...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19269.html#19269 Author: Dayv3
Subject: 5038
Posted: 10-March-2012 at 12:24pm



"Set the following folder permissions for the “Internet User” (IUSR) or the “Everyone”:
  • READ/WRITE on the productcart folder and all of its files and folders.


Just in case anyone has trouble or confusion with this directory, remember that in the productcart directory may have been renamed to something like store.  I spent some time, with frustration, on this issue.  I had Early Impact install my software and never knew that they renamed the directory to store.  I could not find the productcart directory to set the permissions. I thought it was the pc directory under store, which is incorrect... so went on the frustrations as to why I could not get the permissions set correctly.

Eventually, I opened a ticket and after a few back and forths with tech support (with frustration on both sides) we finally got it figured out.  I hope this helps anyone who may have tripped on the same issue.

Dave





Edited by Dayv3 - 10-March-2012 at 12:55pm]]> Sat, 10 Mar 2012 12:24:59 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19269.html#19269 <![CDATA[Read/Write Folder Permissions : I&#039;m agreed with Hamish, but...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19268.html#19268 Author: Guests
Subject: 5038
Posted: 10-March-2012 at 1:07am

I'm agreed with Hamish, but if you want to nit pick it, you'd have to go down to the file level. 

If you really want to manage a "non-issue" at this level, you're probably going to be on your own to pick through them as it's rather a waste of our time to consider this, IMHO.
]]> Sat, 10 Mar 2012 01:07:12 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19268.html#19268 <![CDATA[Read/Write Folder Permissions : Which folders are absolutley...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19267.html#19267 Author: robguay
Subject: 5038
Posted: 09-March-2012 at 10:11am

Which folders are absolutley required to have write permissions?]]> Fri, 09 Mar 2012 10:11:54 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19267.html#19267 <![CDATA[Read/Write Folder Permissions : Hi, ProductCart is PCI compliant...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19266.html#19266 Author: Hamish
Subject: 5038
Posted: 08-March-2012 at 6:46pm

Hi,
   ProductCart is PCI compliant with the folder permissions set exactly like that so I don't believe you have any reason for concern. We have never heard of any store compromised because of the folder permissions and you can be certain we would have changed the advised settings if we had.

From our home page...
"Robust, flexible, reliable, and secure.
Among other things, ProductCart is one of the few shopping carts to have been officially PA-DSS validated."

]]> Thu, 08 Mar 2012 18:46:49 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19266.html#19266 <![CDATA[Read/Write Folder Permissions : Quote from--&gt; wiki.earlyimpact.com&#034;Set...]]> https://forum.productcart.com/read-write-folder-permissions_topic5038_post19263.html#19263 Author: robguay
Subject: 5038
Posted: 08-March-2012 at 11:35am

Quote from--> wiki.earlyimpact.com
 
"Set the following folder permissions for the “Internet User” (IUSR) or the “Everyone”:
  • READ/WRITE on the productcart folder and all of its files and folders.
  • READ/WRITE/DELETE on the productcart/includes folder and all of its files and folders
  • READ/WRITE/DELETE on the productcart/pcadmin folder and all of its files and folders"

    • This seems extreme does anyone have a better security structure on your web site?
     
    Beer
]]> Thu, 08 Mar 2012 11:35:41 +0000 https://forum.productcart.com/read-write-folder-permissions_topic5038_post19263.html#19263