# Howto setup permissions for plugins dir **URL:** \ **Category:** Installation Issues\ **Created:** [March 29, 2019, 1:32pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298 "2019-03-29T13:32:10Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 1:32pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/1 "2019-03-29T13:32:10Z")
I’m running KanBoard in a docker container. I have enabled the “Customizer” plugin. I can uploaded new logo, there is no error message. But it only displays a broken image. The docker log log shows this: 2019/03/29 13:29:29 [error] 17#17: \*29797 FastCGI sent in stderr: “PHP message: PHP Warning: file\_put\_contents(plugins/Customizer/Assets/css/theme.css): failed to open stream: Permission denied in /var/www/app/plugins/Customizer/Plugin.php on line 37” while reading response header from upstream, client: 172.25.0.1, server: localhost, request: “GET /?controller=UserAjaxController&action=status HTTP/1.1”, upstream: “fastcgi://unix:/var/run/php-fpm.sock:”, host: “172.25.0.3” I have three questions: 1. Which directory should have write access to what user? I was trying to find this info on the kanban/kanban official docker image page but there is nothing useful about this ( [https://hub.docker.com/r/kanboard/kanboard/](https://hub.docker.com/r/kanboard/kanboard/) ) 2. Shouldn’t the Customizer plugin detect that there was a file upload, and issue an error message about that? Actually it says that the file was successfully uploaded (but it was not) 3. Would it be possible for users to select their own theme? E.g. on a per user bases, after they are logged in, ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 4:57pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/2 "2019-03-29T16:57:14Z")
> [@nagylzs](#): > > Which directory should have write access to what user? I was trying to find this info on the kanban/kanban official docker image page but there is nothing useful about this ( [Docker](https://hub.docker.com/r/kanboard/kanboard/) ) your plugins folder and data folder should be read/write. This issue may help: [A lot of PHP errors when enabling Customizer · Issue #73 · creecros/Customizer · GitHub](https://github.com/creecros/Customizer/issues/73) > [@nagylzs](#): > > Shouldn’t the Customizer plugin detect that there was a file upload, and issue an error message about that? Actually it says that the file was successfully uploaded (but it was not) If it says it did, then it did. You might not know where to look. It would no longer be named what you uploaded it as. It utilitizes the database and file upload controller components already in kanboard. > [@nagylzs](#): > > Would it be possible for users to select their own theme? E.g. on a per user bases, after they are logged in, No. Only an admin can change the theme, and it is global. Welcome to play with it: [https://projects.nachostudio.ml](https://projects.nachostudio.ml) u: admin pw: admin This is also running in a docker container. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 7:06pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/3 "2019-03-29T19:06:41Z")
Thank your for your answers! I’m a bit concerned, because the plugin writes files in a directory that also contains PHP files. Would it be more secure to allow uploads to a directory that is completely separated from PHP files? (This is not a very important question though.) About the permissions: I have figured out that php fcgi runs as uid=100 and gid=100 in the docker container. After I did “chown -R 100:100 plugins” the upload errors disappeared from the logs, and I could change colors and upload files. (In the bacground it called file\_put\_contents on a css file.) The official page of the kanban/kanban docker image should really tell something about these uid and guid values. Most users will use mounted volumes for the plugins directory, and it would be better if they knew in advance that they must set uid=100 and guid=100. I’m telling you, there was a file\_put\_contents/permission denied log message in the docker container log, and the Customizer plugin displayed a green (file successfully uploaded) notification at the same time. This is a fact. I can reproduce and create a new issue on github if you want to investigate. Just I’m not sure if I should post this to the KanBoard project or the Customizer project. And finally: even though the errors in the logs disappeared, I still can’t change my logo. The upload suceeds, but a broken image symbol is displayed instead of the logo itself. This is how it looks: ![01](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/1X/1a181d87efad5ae840e3db782ac960b8c12b18bb.png) The relative URL for the logo is: `/?controller=CustomizerFileController&action=image&plugin=customizer&file_id=11` If I open this URL then I get HTTP 200 with image/jpeg content type, but my firefox says that it is a 0x0 jpeg image (probably it received nothing or garbage). There is nothing about this in the docker container logs. ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 7:44pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/4 "2019-03-29T19:44:24Z")
> [@nagylzs](#): > > Thank your for your answers! I’m a bit concerned, because the plugin writes files in a directory that also contains PHP files. Would it be more secure to allow uploads to a directory that is completely separated from PHP files? (This is not a very important question though.) Not that I am aware of. Images are uploaded to the Data Folder, `DATA_DIR\files\customizer\...`, the same place all kanboard files are uploaded to. The theme.css is contained in an assets folder. That said, I’m not a security buff. > [@nagylzs](#): > > I’m telling you, there was a file\_put\_contents/permission denied log message in the docker container log, and the Customizer plugin displayed a green (file successfully uploaded) notification at the same time. This is a fact. I don’t dispute that fact, but the log you referenced was not related to file upload. `PHP message: PHP Warning: file_put_contents(plugins/Customizer/Assets/css/theme.css)` It was related to you not having permission in the plugin folder, which is where the css is rewritten every time you change the theme. If you have other logs, that might help. My guess is you don’t have the correct permissions to the DATA\_DIR or your DATA\_DIR constant in the config.php of Kanboard is incorrect. ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 7:55pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/5 "2019-03-29T19:55:07Z")
another clue is, `file_id=11` Customizer cleans itself up, and there should never be more than 3 files. I can see `file_id=4` maybe 5, but 11 is pretty high, it’s telling me that it either doesn’t have permissions to remove the files, or it can’t find them. You could also check the `customizer_files` table in the DB. ![image](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/1X/2dac8c680cb0a3fb1d84ae126e43874bd27a6eea.png) ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:06pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/6 "2019-03-29T20:06:05Z")
Container: `96444767a622 kanboard/kanboard:v1.2.8 "/usr/local/bin/entr…" 6 days ago Up 4 days 80/tcp, 443/tcp kanboard` It was created with: ``` docker run -d -t \ --name kanboard \ --network kanboard \ --ip 172.25.0.3 \ -v /docker/kanboard/data:/var/www/app/data \ -v /docker/kanboard/plugins:/var/www/app/plugins \ --env-file $(pwd)/envfile \ kanboard/kanboard:v1.2.8 ``` Permissions for data and plugin dirs: ``` root@nkp:~# ls -lanh /docker/kanboard total 24K drwxr-xr-x 6 0 0 4.0K Mar 29 14:21 . drwxr-xr-x 9 0 0 4.0K Mar 23 11:46 .. drwxr-xr-x 3 100 101 4.0K Mar 25 09:14 data drwx------ 19 999 0 4.0K Mar 23 13:09 db drwxr-xr-x 8 100 101 4.0K Mar 29 14:24 plugins ``` It is the same for all files inside plugins and data (chown -R 100:101 /docker/kanboard/plugins). (The db directory is for a PostgreSQL that is provided for kanban and it is working fine.) The kanboard/kanboard container runs php fgci with nginx, and indeed the nginx uid and guid is 101:100 ``` # docker exec -ti kanboard grep nginx /etc/passwd nginx:x:100:101:nginx:/var/lib/nginx:/sbin/nologin ``` It seems that some files have been uploaded, because I can see this under /docker/kanboard/data/files/customizer, before uploading a test file called 100.jpg: ``` # ls -R .: 1 2 3 themes ./1: ff7bf4430e505423a9867b11fa45db6ef590360c ./2: e295b88ed734a89b4185868e7f129850671c0fac ./3: 2bdba66919db3dc94f9f4231e11c13c7cd4f2df7 ./themes: ``` I have been watching the logs with this command: ``` # docker logs -f kanboard ``` When I upload the logo file, then there is no new message in the log. The UI display this: ![100_uploaded](https://global.discourse-cdn.com/free1/uploads/kanboard1/original/1X/e781f674bee2c2df4959f1d9f08c434765b35f94.png) After the upload, there are no new files under /docker/kanboard/data/files/customizer. If it was really uploaded, then it went somewhere else. What else should I test? Thank you, Laszlo ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:10pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/7 "2019-03-29T20:10:19Z")
> [@nagylzs](#): > > ./1: ff7bf4430e505423a9867b11fa45db6ef590360c > ./2: e295b88ed734a89b4185868e7f129850671c0fac > ./3: 2bdba66919db3dc94f9f4231e11c13c7cd4f2df7 These are your files. The `ff7bf4430e505423a9867b11fa45db6ef590360c` is your header , `e295b88ed734a89b4185868e7f129850671c0fac` is your login logo `2bdba66919db3dc94f9f4231e11c13c7cd4f2df7` is your favicon. When you upload them, this is what the become. You will not find `100.jpg` anywhere. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:10pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/8 "2019-03-29T20:10:35Z")
Database: ``` root@site:/docker/kanboard/data/files/customizer# docker exec -ti kanboard-db psql -U postgres -d kanboard -c "select * from customizer_files " id | custom_id | name | path | is_image | size | user_id | date ----+-----------+------------------+-------------------------------------------------------+----------+------+---------+------------ 12 | 3 | site_logo_100.jpg | customizer/3/2bdba66919db3dc94f9f4231e11c13c7cd4f2df7 | t | 6523 | 2 | 1553866573 13 | 2 | favicon.png | customizer/2/e295b88ed734a89b4185868e7f129850671c0fac | t | 4299 | 2 | 1553866604 14 | 1 | 100.jpg | customizer/1/abf4e46b66d46c14bc6a942311231d3a1755b4a9 | t | 4365 | 2 | 1553889608 (3 rows) ``` ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:12pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/9 "2019-03-29T20:12:04Z")
yes, see they are there, and they have sizes. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:14pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/10 "2019-03-29T20:14:18Z")
Okay, so they are uploaded and stored. But it is still not displayed. The SRC attribute for the logo is: `/?controller=CustomizerFileController&action=image&plugin=customizer&file_id=11` If I replace file\_id=11 with file\_id=1 or 2 or 3 then I get HTTP 500 internal error and this log: ``` 2019/03/29 20:12:47 [error] 17#17: *31116 FastCGI sent in stderr: "PHP message: PHP Fatal error: Uncaught TypeError: Argument 1 passed to Kanboard\Plugin\Customizer\Controller\CustomizerFileController::renderFileWithoutCache() must be of the type array, null given, called in /var/www/app/plugins/Customizer/Controller/CustomizerFileController.php on line 207 and defined in /var/www/app/plugins/Customizer/Controller/CustomizerFileController.php:70 Stack trace: #0 /var/www/app/plugins/Customizer/Controller/CustomizerFileController.php(207): Kanboard\Plugin\Customizer\Controller\CustomizerFileController->renderFileWithoutCache(NULL, 'image/jpeg') #1 /var/www/app/app/Core/Controller/Runner.php(77): Kanboard\Plugin\Customizer\Controller\CustomizerFileController->image() #2 /var/www/app/app/Core/Controller/Runner.php(31): Kanboard\Core\Controller\Runner->executeController() #3 /var/www/app/index.php(9): Kanboard\Core\Controller\Runner->execute() #4 {main} thrown in /var/www/app/plugins/Customizer/Controller/CustomizerFileController.php on line 70" while reading response header from upstream, client: 172.25.0.1, server: localhost, request: "GET /?controller=CustomizerFileController&action=image&plugin=customizer&file_id=1 HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm.sock:", host: "172.25.0.3" ``` Something is still wrong. ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:18pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/11 "2019-03-29T20:18:05Z")
> [@nagylzs](#): > > The SRC attribute for the logo is: > > `/?controller=CustomizerFileController&action=image&plugin=customizer&file_id=11` The SRC attribute for the logo WAS, not is. Looking at your DB, id 11 is no longer in your DB. That number keeps going up, everytime you upload a file. It should not being do that. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:18pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/12 "2019-03-29T20:18:53Z")
Yes, you are right. After the upload, the logo src has changed to file\_id=14. I’m going to paste the full link to the url below for the logo. [https://kb.nkp.uni-eszterhazy.hu/?controller=CustomizerFileController&action=image&plugin=customizer&file\_id=14](https://kb.nkp.uni-eszterhazy.hu/?controller=CustomizerFileController&action=image&plugin=customizer&file_id=14) You can check the request and the response yourself. The response is HTTP 200, but it I’m not able to display it as an image. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:24pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/13 "2019-03-29T20:24:00Z")
I think that the reply has HTTP 200 and Content-Type: image/jpeg, but the contents of that is a HTML page. Very strange. ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:24pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/14 "2019-03-29T20:24:33Z")
Give me sometime, I’ll try and duplicate your container and see if I can replicate your issue. I’m not going to solve it by shooting in the dark. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:25pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/15 "2019-03-29T20:25:11Z")
Well, I can only thank you. You are very responsive. I don’t know how to thank you. 🙂 ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:26pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/16 "2019-03-29T20:26:11Z")
FYI here is the list of installed plugins: Bigboard Calendar Customizer Gantt OAuth2 Timetrackingeditor It may matter. ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:34pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/17 "2019-03-29T20:34:47Z")
Your mounted volumes match mine in permissions: drwxr-xr-x 4 0 0 4.0K Nov 8 2017 . drwxr-xr-x 3 0 0 4.0K Nov 8 2017 … drwxr-xr-x 3 100 101 4.0K Mar 29 08:00 data drwxr-xr-x 16 100 101 4.0K Jan 14 18:15 plugins Could you try switching to sqlite for a moment, lets rule out DB. Just change it in the config, it will reset all the stored info, but it will all return when you switch back to postgres. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:45pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/18 "2019-03-29T20:45:04Z")
After swtiched to sqlite, I could upload a new logo and it is displayed. I have also tried to upload another one and it also worked. I cannot just replace my PostgreSQL database with a new one, because it already has live data. ---
**Author:** ![nagylzs](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/nagylzs/32/124_2.png) [@nagylzs](https://kanboard.discourse.group/u/nagylzs)\ **Post date:** [March 29, 2019, 8:47pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/19 "2019-03-29T20:47:44Z")
This table has default id value of `nextval('customizer_files_id_seq'::regclass)` I would expect it to increase when a new row is inserted. ``` # docker exec -ti kanboard-db psql -U postgres -d kanboard psql (10.2 (Debian 10.2-1.pgdg90+1)) Type "help" for help. kanboard=# \d customizer_files Table "public.customizer_files" Column | Type | Collation | Nullable | Default -----------+------------------------+-----------+----------+---------------------------------------------- id | integer | | not null | nextval('customizer_files_id_seq'::regclass) custom_id | integer | | not null | name | character varying(255) | | not null | path | character varying(255) | | not null | is_image | boolean | | | false size | integer | | not null | 0 user_id | integer | | not null | 0 date | integer | | not null | 0 Indexes: "customizer_files_pkey" PRIMARY KEY, btree (id) kanboard=# ``` ---
**Author:** ![creecros](https://yyz2.discourse-cdn.com/free1/user_avatar/kanboard.discourse.group/creecros/32/156_2.png) [@creecros](https://kanboard.discourse.group/u/creecros)\ **Post date:** [March 29, 2019, 8:52pm UTC](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298/20 "2019-03-29T20:52:38Z")
> [@nagylzs](#): > > This table has default id value of `nextval('customizer_files_id_seq'::regclass)` I would expect it to increase when a new row is inserted. it deletes before it adds, not adds before it deletes. if you don’t mind, adding it to the issue tracker, and I will look for the issue. [Next page](https://kanboard.discourse.group/t/howto-setup-permissions-for-plugins-dir/298.md?page=2)