• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue Permissions - [Move Domain]

bd7

New Pleskian
Server operating system version
Windows Server 2019 Standard
Plesk version and microupdate number
Obsidian 18.0.44 update 3
When using the [Move Domain] capability on a subscription, the new subscription that is a clone of the old/test site doesn't have proper custom permissions assigned.
It appears to bypass the C:\Program Files (x86)\Plesk\etc\DiskSecurity\custom.xml file

Additionally, when using Plesk Repair tool command: plesk repair --directory-permissions -directory <the_path>
It fails to apply the custom permissions on the root folder, or any subfolder.

The custom permissions only seem to work when creating a new site from scratch. No other time are the rules applied.


Rules example:
Code:
<?xml version="1.0" encoding="utf-8" ?>
<Entries>
<!-- https://docs.plesk.com/en-US/obsidian/advanced-administration-guide-win/changing-security-settings-for-file-system-objects-and-accounts/administering-windows-objects-security-on-pleskmanaged-server/customizing-object-security-settings-in-plesk/customizing-disk-security.49498/ -->

    <!-- plesk upgrade: https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />
   
    <!-- https://support.plesk.com/hc/en-us/articles/213914325 -->
    <Entry AccounType="1" Account="Psacln" Path="C:\inetpub\mailroot\" SubPath="pickup" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x0" />


<!-- Give local admin users on the server RDP itself access to the website's folder -->
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x144" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="Servers" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
    <Entry AccounType="1" Account="Web Admin" Path="[HTTPD_VHOSTS_D]" SubPath="default" AceFlags="ThisFolderSubfoldersAndFiles" AccessMask="FullAccess" EntryFlags="0x140" />
   
</Entries>
 
Back
Top