File permissions revert to 0770 after file modification

[Skyspek]

CloudPanel version(s) affected

2.4.2

Description

When I make modifications to a file via the file manager, the file permissions that were initially set to 0644 are automatically changed to 0770 after the modification. This behavior causes permission issues, and I would like the permissions to remain unchanged after editing a file.

How to reproduce

1. Go to the file manager.
2. Edit a file that has 0644 permissions.
3. Save the modifications.
4. Refresh the page after saving.
5. Observe that the file permissions change from 0644 to 0770.

You can also test this with a folder:

1. Change the permissions of a folder.
2. Observe that all files inside the folder have their permissions changed as well.

Possible Solution

A potential fix would be to modify the way file permissions are handled after edits in the file manager, ensuring that the initial permissions remain intact unless explicitly changed by the user.

Additional Context

No response

[bitwanderer]

I can confirm this.

Also, new WordPress sites have all file permissions at 0770 instead of 0660.

[cloudpanel-io]

I can confirm this.

Also, new WordPress sites have all file permissions at 0770 instead of 0660.

That's not a bug. 660 is correct if you have only one user. Many projects have multiple users working on one site, where group write permissions are needed.

[bitwanderer]

I can confirm this.
Also, new WordPress sites have all file permissions at 0770 instead of 0660.

That's not a bug. 660 is correct if you have only one user. Many projects have multiple users working on one site, where group write permissions are needed.

No, the new files are set at 0770, the same as the folders. The files should be 0660. Just try creating a new WP site, and you'll see.

[ZKVillaraza]

I have almost similar issue. changing file permission is not working. it saves but always going back to the previous permission

[chiareu]

I can confirm this.
Also, new WordPress sites have all file permissions at 0770 instead of 0660.

That's not a bug. 660 is correct if you have only one user. Many projects have multiple users working on one site, where group write permissions are needed.

I'm trying to understand how the user structure and security is thought of under CloudPanel, and this 0770 global permission per [site] is a bit strange. Please explain why a WordPress website should run under multiple users?
Why doesn't everything run under the site user?

The recommended file and folder permissions for WordPress are 755 for directories and 644 for most files. These permissions are necessary for WordPress auto updates to work properly.

I understand that for other types of projects (not WordPress) more users may be needed and then they are added to the group. But this raises the risk that a certain user (let's name him HACKER1) will be added to several groups and then we have a big problem.