About running webapps as differents user/group, note that it's been discusses some time ago : http://lists.debian.org/debian-webapps/2010/05/msg00001.html Jérémy.