.bssg_cache permissions issues with multiple authors #35

Open
opened 2025-08-22 00:18:52 +02:00 by Venya · 0 comments

TL;DR

I have implemented BSSG for a simple blog on our LAN to track our activities for home schooling. The kids each have to post at the end of the day. Unfortunately, we are experiencing some file permissions issues.

The setup

Debian 12 VM on my TrueNAS box (hostname codex.local):

  • BSSG is in /opt/BSSG
  • the site-specifics are in /var/www/html, with the output in /var/www/html/output (served by caddy)

We each have shell logins to codex.local and I recursively set the permissions for /var/www/html to belong to the users group with RWX. (The users group similarly owns the stuff in /opt/BSSG.)

Because bssg seems much happier to be run directly from the /opt/BSSG directory, I wrote a little script for them:

  1. save their current working directory to a variable;
  2. cd into the /opt/BSSG directory
  3. run the 'bssg.sh post' command
  4. cd back to their previous working directory.

The problem

Everything works for me. Everything works for them--except the build. They keep getting a permissions error that they cannot write to the /var/www/html/.bssg_cache file, so they can't finish the build. When I look at permissions, that file is now owned by my user group:

drwxrwxr-x 7 ben ben 18 Aug 21 21:45 .bssg_cache

I have tried to chgrp it back to users and ./bssg.sh build runs without issues or errors for me. But when running ./bssg.sh build as user 'ian' there are further permissions issues. I've attached a transcript of the relevant part.

This whole system is exceedingly clever, but unfortunately beyond my ability to make work with our current setup. As it stands, I just run the build myself whenever they tell me they're done; I could automate that, but it would be better if I could make it work the way it is supposed to.

Is there a smarter way to set this up for multiple users? I could simply create a user solely for managing the journal, but I was hoping to gradually expand the services on this box as they get more comfortable on the command line, and I am allergic to multi-user login accounts, even for something so trivial.

Thank you in advance for any ideas!

# TL;DR I have implemented BSSG for a simple blog on our LAN to track our activities for home schooling. The kids each have to post at the end of the day. Unfortunately, we are experiencing some file permissions issues. # The setup Debian 12 VM on my TrueNAS box (hostname codex.local): - BSSG is in /opt/BSSG - the site-specifics are in /var/www/html, with the output in /var/www/html/output (served by caddy) We each have shell logins to codex.local and I recursively set the permissions for /var/www/html to belong to the users group with RWX. (The users group similarly owns the stuff in /opt/BSSG.) Because bssg seems much happier to be run directly from the /opt/BSSG directory, I wrote a little script for them: 1. save their current working directory to a variable; 2. cd into the /opt/BSSG directory 3. run the 'bssg.sh post' command 4. cd back to their previous working directory. # The problem Everything works for me. Everything works for them--except the build. They keep getting a permissions error that they cannot write to the /var/www/html/.bssg_cache file, so they can't finish the build. When I look at permissions, that file is now owned by my user group: > drwxrwxr-x 7 ben ben 18 Aug 21 21:45 .bssg_cache I have tried to chgrp it back to users and `./bssg.sh build` runs without issues or errors for me. But when running `./bssg.sh build` as user 'ian' there are further permissions issues. I've attached a transcript of the relevant part. This whole system is exceedingly clever, but unfortunately beyond my ability to make work with our current setup. As it stands, I just run the build myself whenever they tell me they're done; I could automate that, but it would be better if I could make it work the way it is supposed to. Is there a smarter way to set this up for multiple users? I could simply create a user solely for managing the journal, but I was hoping to gradually expand the services on this box as they get more comfortable on the command line, and I am allergic to multi-user login accounts, even for something so trivial. Thank you in advance for any ideas!
stefano self-assigned this 2025-08-24 09:00:26 +02:00
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: stefano/BSSG#35
No description provided.