[Zope-dev] Configurable Blob Permissions ZODB

[Jim Fulton]

On Fri, Jun 17, 2011 at 4:53 AM, Robert Niederreiter <rnix at squarewave.at> wrote:
> Hi,
>
> Refering to this bug report
>
> https://bugs.launchpad.net/zodb/+bug/683751
>
> And this usecases
>
> http://stackoverflow.com/questions/6168566/collective-xsendfile-zodb-blobs-and-unix-file-permissions
>
> It would be great if create mode of blobs would be configurable in ZODB
> directly.
>
> For UNIX Systems there could be 2 flags for folder creation mode and
> blob file permissions, i.e.
>
> BLOB_FOLDER_MODE = 750
> BLOB_FILE_PERMISSIONS = stat.S_IRUSR | stat.S_IRGRP
>
> which are used then at the appropriate places.
> See here: http://pastebin.com/wNLYyXvw
>
> I don't know how this refers to NTFS, though.
>
> Further this configuration flags should be available in ZOPE and ZEO
> Server configuration files.
>
> Any doubts, suggestions, other ideas?

-1 for a new configuration option.

I would rather just have write permission *only* removed
from committed blob files.  Read permissions should be controlled
by existing mechanisms such as umask.

Jim

-- 
Jim Fulton
http://www.linkedin.com/in/jimfulton