Captcha Permissions

[Merchlinski]

We have development, testing, and production servers running Redhat, Apache, and CF11.  Our captcha images used to work on dev and test, but now throw 403 errors and are not displayed.  In production, the images still work and are displayed.

Permissions on dev and test for the images at /opt/coldfusion11/cfusion/tmpCache/CFFileServlet/_cf_captcha are defaulting to 600.  On production, it is defaulting to 644.  Where do these permissions get set?

[Dave Watts]

You should be able to set them in the shell, if they're not set properly during the install.

Dave Watts, Eidolon LLC

[Merchlinski]

We've looked at umask settings for the user that runs CF, but they are set the same across servers. 

The captcha images on our prod server are being created with more permissions that the umask allows.  Creating a file on prod using touch, creates the file using the umask.   Are captcha permissions controlled somewhere else?

[Dave Watts]

I would not entirely be surprised if that's controlled differently, but I don't know anything about it. Sorry.

Dave Watts, Eidolon LLC

[Merchlinski]

No worries - I appreciate the response!