SugarCRM and Permissions

[kbrill]

In the config.php we have an array that controls permissions and depending on which OS you are using and sometime what addins to that OS you may have to change that setting.

You can tell you need to change the permissions when you get an error like:

Warning: chmod() [function.chmod]: Operation not permitted in /usr/local/www/data/sugarcrm/include/utils/sugar_file_utils.php on line 189
Specified directory '' for zip file '/usr/local/www/data/sugarcrm/cache/upload/SugarPro-to-SugarEnt-Conversion-5.1.0c.zip' extraction does not exist.


The defaults are

   'default_permissions' => 
  array (
    'dir_mode' => 1528, //2770
    'file_mode' => 432,
    'user' => '',
    'group' => '',
  ), 
  

but if you are running freebsd, SELinux, CPanel (or any other linux "head-end") you need to use these settings.

   'default_permissions' => 
  array (
    'dir_mode' => 504, //0770
    'file_mode' => 432,
    'user' => '',
    'group' => '',
  ), 
  

as these OSs don't handle the 'sticky' bit the same way Linux does. I have had a few installs where we needed to use

   'default_permissions' => 
  array (
    'dir_mode' => 511, //0777
    'file_mode' => 511,
    'user' => '',
    'group' => '',
  ), 
  

[brian.goodman]

Hello Ken,

I believe that users also need to change the permissions in the /include/utils.php (~line 160) so the permissions survive the repair/rebuild processes.

Here is my experience:

On a new install, I was having all kinds of trouble related to permissions. I followed the WIKI advice shown here http://www.sugarcrm.com/wiki/index.p...sions_on_Linux on changing permissions in the cache, custom, data and modules directories and the config.php file and everything worked fine. (in my case the rights were 777 and 666)

This cured all my problems, BUT, after any repair/rebuild processes, the problems reappeared.

Matching your advice, some forum users recommended changing the dir_mode and file_mode values in config.php to match those used in the installation directory & file rights described in the WIKI. I did that BUT there were still problems after repair/rebuild processes.

Another forum user recommended changing the dir_mode and file_mode values in /include/utils.php. (KUSKE in this posting - http://www.sugarcrm.com/forums/showt...g_override.php).

I then made the values in config.php and utils.php match and now everything works fine, surviving any repair/rebuild processes.

A few confusing items along the way:
1. the values in the config.php are decimal
2. the values in the utils.php are octal
3. it is not clear when to use (for instance) 02777 versus 0777 (and their corresponding decimal versions)

I hope this is helpful to other users. If there is some more science behind matching these values, especially some information on confusing point #3, I would appreciate any help.

There seems to be a lot of grief associated with permissions issues and forum users always point to the directory rights WIKI entry as the solution. It is not a complete solution though. So if you agree with the conclusions, some instructions about modifying the config.php and /include/utils.php should be added to the WIKI entry referenced above.

Thanks,

Brian

[kbrill]

That section of include/Utils.php should only be run in you delete your config.php. Those values are only used to create a new config.php so I am unsure why they would have any bering once the config.php is created.

[brian.goodman]

Kevin,

I will try it again this time leaving the utils.php as default, and matching the permissions in the config.php file with the permissions applied on the cache, custom, data, modules files and directories as per the wiki referenced above. I think the missing link in the wiki is that the permissions applied on those files and directories must match the file_mode and dir_mode permissions in config.php

Regards,

Brian