Magento

Hi,
How to enable package manager in admin - do I have to chmod 777 everyfile/folder to use magento connect or theres specific folders which should be chmod to 777.
I think it isnt safe to have everything with 777 permissions
Best regards,
Piotr

I really do hope its not all folders 777, and I really doubt it, as it would be a great security issue. But I am sure someone knows exactly what it requires, I would think it would be a localized permission, and maybe not even 777, perhaps a 666 etc.

UPDATE:
I found a couple of links for you, let me know if they help
http://www.magentocommerce.com/boards/viewreply/11486/

Or this one that does say you have to chmod 777, in that case I would definately do it only while you need it and switch it back
.http://www.magentocommerce.com/boards/viewreply/14144/

I’m looking for the answer too…

i would not recommend to change the permission to just about everything recursively as the command that you use might do so.

Here is a command that you can run on your SSH window to CHMOD only the directly and the subdirectories but not the files under those directories:

All you have to do is to go to your magento installation directory on your server through SSH and from that directory type this command:

This will change the permissions of only directory and subdirectories under magento; which changing the permissions on the magento directory itself as you do not need to have it changed.
Obviously it would be better to know exactly which directory(ies) need this fix and only apply this change to them.

I hope this helps.

Thanks VisualFrames! I SSHed into my www directory and ran this command:

find . -type d -exec chmod 777 {} \;

...got a couple Operation not Permitted errors on the var/cache folders but that didnt matter. It all works great now!

VisualFrames solution also worked for me.  The var/cache folders aren’t necessary for Mageno Connect as far as I can tell.

Thanks VisualFrames.

Do not worry about the permissions issue with var/cache. As you must have guessed that is where magento cache is written and it can’t be modified while the store is live.

Stay tuned guys as we are going to release some themes soon. You can view a preview of one of our upcoming themes here:

http://www.magentocommerce.com/boards/viewthread/5294/#t19683

But there’s no other way to install moder theme???

For reasons for permissions specifics and details please see this article: http://www.magentocommerce.com/wiki/magento_filesystem_permissions

HTH

hello i have trouble with magentoconnect and menus in admin

when i do a fresh install everything work nice even the menus in the admin section , to make magentoconnect work i do the chmod 777 on all directory (seems strange to me) but after that the menus in the admin section don’t work, so i’m not able to install the fooman patch, i tried to install the extension by ssh but no way to make it work it keep telling me that the extention is not found while i’m sure of the name (on my local machine everything work fine so i’m able to retrieve the name of the extentions and the version availiable)

EDIT: my ssh upgrade don’t work simply because the ssh shell don’t have internet access on my hoster company :(

RE EDIT : i reinstalled magento , the magentoconnect worked without the chmod 777 (don’t ask me how) so i was able to install the extensions now all is ok ...

Same thing happens to me, won’t be fixed just with a reinstall. Chmod 755 for the folders and 644 for the files @ the js folder and everything will be alright.

I’m having a few issues with file permissions which basically means that I have to have all my files set to 755 or magento throws up errors.  here’s what happened.

went into magento connect - file permission errors
searched on magento forums and found thread which said to set all folders to 755 and files to 644
did that and then nothing worked as it was throwing up errors

is there anything specific I need to know

This is the error i get

What matters is if the web server has write access to the files/folders. If PHP runs under the apache default user ID (e.g. ‘nobody’), which would be the case if mod_php is used, then all files/folders that need to be updated through Magento Connect will have to be writable by user ‘nobody’ (i.e. the Others write-bit must be set).

If PHP runs under your own user ID (in suPHP/FastCGI environments), then chmod 755 for directories and chmod 644 for files would be OK.

You should ask your host what kind of permissions that are needed on your server.

Important: if you chmod your files/folders to 777 in order to run Magento Connect, always remember to change the permissions back afterwards. Otherwise, someone could easily compromise your site. The following files/directories will need web server write permissions for correct operation:

Sindre|ProperHost - 13 October 2008 11:24 AM

What matters is if the web server has write access to the files/folders. If PHP runs under the apache default user ID (e.g. ‘nobody’), which would be the case if mod_php is used, then all files/folders that need to be updated through Magento Connect will have to be writable by user ‘nobody’ (i.e. the Others write-bit must be set).

If you’re on mod_php, you need to perform upgrades and extension installations via SSH. Magento Connect is simply not an option for mod_php, even when you set all directories to 777.

It’s a small sacrifice to take for the performance benefits that mod_php offers over other configurations, and honestly, it’s easier and faster to use SSH, regardless of how PHP is running.

http://www.magentocommerce.com/wiki/groups/227/magento_connect
http://www.magentocommerce.com/wiki/groups/227/upgrading_magento_via_ssh

Important: if you chmod your files/folders to 777 in order to run Magento Connect, always remember to change the permissions back afterwards. Otherwise, someone could easily compromise your site. The following files/directories will need web server write permissions for correct operation

http://www.magentocommerce.com/wiki/groups/227/resetting_file_permissions

@Crucial, that is not quite true. Magento Connect would work perfectly for mod_php as long as the web server user ID has write permissions for the necessary files/directories. SSH might be faster, yes, but not all users are proficient with the shell and thus prefer a web-based interface. The Connect Manager was made for a reason.

Also, the instructions in your “Resetting File Permissions” article I believe is missing one important thing. If you are running mod_php, var/cache and var/session would most likely need to be chmod 777 in order for the apache user ID to be able to write to it.

The 1st thing I did when I find out Magento was installed with 777 permissions on every thing is run the find command like the above to change them to 644 and 755.

Now I find all new files and folders created in Magento like cache and uploaded files are set to 777. Browsed the source and find dozens upon dozens of chmode and mkdir with mode hard coded to 777.

Call me paranoid but this is scary. I was brainwashed to avoid group and world write. Can someone explain why it is OK now?