• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

FTP permission thread with sub FTP users

B

BonDuong

Guest
Hi,

I am using Plesk v10. I just found out that sub FTP users are able to delete files and folders which they can not modify or upload.

For example, customer name shawncust3 has a domain shawncust3domain.com with main FTP account shawncust3d/Testing@123. Shawn can not delete/modify/upload anything from following directories: anon_ftp/, error_docs/, statistics, subdomains, and web_users/.

However, if shawncust3 creates another FTP account cust3FTP3/Testing@123 with read and write permission, this cust3FTP3 is unable to modify/upload BUT ABLE to DELETE any folders and files from following directories: anon_ftp/, error_docs/, statistics, subdomains/, and web_users/.

We really worry about this thread because we do not want sub FTP user to be able delete config files.


Is it a bug with Plesk?


Thank you,
 
Back
Top