Hello, For permission settings, the Webapps Policy Manual draft covers the cases of static configuration files and application-modifiable configuration. I suggest to explicitely cover the following cases for both filesystem paths and permissions: * application content (e.g. application code); * administrator provided application content (e.g. plugins or extensions); * user uploaded content (e.g. wiki pages); * application configuration. Some webapps allow online addition of plugins, which is not currently covered. Is there a repository I could clone/checkout to prepare a patch for the Manual draft? Regards, -- Tanguy Ortolo
Attachment:
signature.asc
Description: Digital signature