- Server operating system version
- Windows Server 2019 Standard
- Plesk version and microupdate number
- Obsidian 18.0.44 update 3
When using the [Move Domain] capability on a subscription, the new subscription that is a clone of the old/test site doesn't have proper custom permissions assigned.
It appears to bypass the C:\Program Files (x86)\Plesk\etc\DiskSecurity\custom.xml file
Additionally, when using Plesk Repair tool command: plesk repair --directory-permissions -directory <the_path>
It fails to apply the custom permissions on the root folder, or any subfolder.
The custom permissions only seem to work when creating a new site from scratch. No other time are the rules applied.
Rules example:
It appears to bypass the C:\Program Files (x86)\Plesk\etc\DiskSecurity\custom.xml file
Additionally, when using Plesk Repair tool command: plesk repair --directory-permissions -directory <the_path>
It fails to apply the custom permissions on the root folder, or any subfolder.
The custom permissions only seem to work when creating a new site from scratch. No other time are the rules applied.
Rules example:
Code:
<?xml version="1.0" encoding="utf-8" ?>
<Entries>
<!-- https://docs.plesk.com/en-US/obsidian/advanced-administration-guide-win/changing-security-settings-for-file-system-objects-and-accounts/administering-windows-objects-security-on-pleskmanaged-server/customizing-object-security-settings-in-plesk/customizing-disk-security.49498/ -->
<!-- plesk upgrade: https://support.plesk.com/hc/en-us/articles/213914325 -->
<Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />
<!-- https://support.plesk.com/hc/en-us/articles/213914325 -->
<Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />
<!-- Give local admin users on the server RDP itself access to the website's folder -->
<Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x144" />
<Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="Servers" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
<Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="default" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
</Entries>