[wp-trac] [WordPress Trac] #33332: Default ACL entries are not set correctly when file is uploaded to WP

WordPress Trac noreply at wordpress.org
Thu Mar 16 11:50:09 UTC 2017


#33332: Default ACL entries are not set correctly when file is uploaded to WP
----------------------------+------------------------------
 Reporter:  slavafomin      |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Filesystem API  |     Version:  4.1.1
 Severity:  major           |  Resolution:
 Keywords:                  |     Focuses:  administration
----------------------------+------------------------------
Changes (by alin104n):

 * severity:  normal => major


Comment:

 I use also default ACL to secure WP. Since WP insists on doing its own
 chmod stuff, it breaks the ACL. The thing is that in the past, the WP
 chmod stuff didn't protect me, the ACL did. This needs a fix. Until then
 just commenting the block suggested by @slavafomin is not enough. You have
 to comment the all the chmod functions content from from wp-
 admin/includes/class*.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33332#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list