id,summary,reporter,owner,description,type,status,priority,component,resolution,keywords,cc,component_version,os,os_version 2204,Make FileZilla play nice within limited access rights in NT?,s_lonewolf,,"Is there any way to make the FileZilla service under NT live happily within the confines of restrictive access? IOW, can FileZilla only have Read ( (RX) (RX) ) access to the whole system, except where needed (log files, directories in which ftp users will be uploading, etc.)? NO FTP server for Windows is capable of this yet, and I have no idea why. Though the most secure solution would be to make sure that a program doesn't even have Read or eXecute permissions on files it shouldn't be touching, it'd be a step in the right direction to know that even if there's a security hole in the server down the road, people wouldn't be able to do much except peek at operating system files. (Instead of being able to bring the whole system to a screaching CRASH because the program had the access to overwrite critical system files.) For reference: I change permissions across the board on NT systems to in an effort to create a more secure environment. Gone is Everybody (only Microsoft would give everybody permission to a system) and Creator/Owner (except for below). The default for me is to give Administrators and SYSTEM Full Control (RXWDPO), Power Users Change (RXWD) and Users Read (RX) from C:\ on down. The only exceptions are for C:\WinNT\Profiles (NT4) or C:\Documents and Settings (2K/XP), where I modify rights according to the user so that each user has their own little space (or have a virii/worms/etc) screw things up. Creator/Owner gets full control for the All Users directory, only so that people can manage their own files as they wish while making sure people keep their hands off of other people's files. I'll use Apache as prime example, only because it's the only program I know of (extra emphasis on ""I know of"") that can live within these confines. Heck, I don't even let Apache have write access to DocumentRoot, only to stop the PHP worms in their tracks! If FileZilla could pull this off, it could have a HUGE advantage over every other FTP server product out there -- commercial, freeware, open-source -- bar none!",Feature request,closed,normal,Other,,,s_lonewolf imessvb Eirik Tim Kosse,,,