DefaultPermissionsCheck.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Install\FolderStructure;

class DefaultPermissionsCheck {

    protected $recommended = array(
        'fileCreateMask' => '0660',
        'folderCreateMask' => '2770',
    );

    protected $names = array(
        'fileCreateMask' => 'Default File permissions',
        'folderCreateMask' => 'Default Directory permissions',
    );

    public function getMaskStatus($which) {
        $octal = '0' . $GLOBALS['TYPO3_CONF_VARS']['BE'][$which];
        $dec = octdec($octal);
        $perms = array(
            'ox' => (($dec & 001) == 001),
            'ow' => (($dec & 002) == 002),
            'or' => (($dec & 004) == 004),
            'gx' => (($dec & 010) == 010),
            'gw' => (($dec & 020) == 020),
            'gr' => (($dec & 040) == 040),
            'ux' => (($dec & 0100) == 0100),
            'uw' => (($dec & 0200) == 0200),
            'ur' => (($dec & 0400) == 0400),
            'setgid' => (($dec & 02000) == 02000),
        );
        $extraMessage = '';
        $groupPermissions = FALSE;
        if (!$perms['uw'] || !$perms['ur']) {
            $permissionStatus = new \TYPO3\CMS\Install\Status\ErrorStatus();
            $extraMessage = ' (not read or writable by the user)';
        } elseif ($perms['ow']) {
            if (TYPO3_OS === 'WIN') {
                $permissionStatus = new \TYPO3\CMS\Install\Status\InfoStatus();
                $extraMessage = ' (writable by anyone on the server). This is the default behavior on a Windows system';
            } else {
                $permissionStatus = new \TYPO3\CMS\Install\Status\ErrorStatus();
                $extraMessage = ' (writable by anyone on the server)';
            }
        } elseif ($perms['or']) {
            $permissionStatus = new \TYPO3\CMS\Install\Status\NoticeStatus();
            $extraMessage = ' (readable by anyone on the server). This is the default set by TYPO3 CMS to be as much compatible as possible but if your system allows, please consider to change rights';
        } elseif ($perms['gw']) {
            $permissionStatus = new \TYPO3\CMS\Install\Status\OkStatus();
            $extraMessage = ' (group writeable)';
            $groupPermissions = TRUE;
        } elseif ($perms['gr']) {
            $permissionStatus = new \TYPO3\CMS\Install\Status\OkStatus();
            $extraMessage = ' (group readable)';
            $groupPermissions = TRUE;
        } else {
            $permissionStatus = new \TYPO3\CMS\Install\Status\OkStatus();
        }
        $permissionStatus->setTitle($this->names[$which] . ' (BE/' . $which . ')');
        $message = 'Recommended: ' . $this->recommended[$which] . '.';
        $message .= ' Currently configured as ';
        if ($GLOBALS['TYPO3_CONF_VARS']['BE'][$which] === $this->recommended[$which]) {
            $message .= 'recommended';
        } else {
            $message .= $GLOBALS['TYPO3_CONF_VARS']['BE'][$which];
        }
        $message .= $extraMessage . '.';
        if ($groupPermissions) {
            $message .= ' This is fine as long as the webserver\'s group only comprises trusted users.';
            if (!empty($GLOBALS['TYPO3_CONF_VARS']['BE']['createGroup'])) {
                $message .= ' Your site is configured (BE/createGroup) to write as group \'' . $GLOBALS['TYPO3_CONF_VARS']['BE']['createGroup'] . '\'.';
            }
        }
        $permissionStatus->setMessage($message);
        return $permissionStatus;
    }

}