A few errors here when doing updates. The update fails, and yet the message at the bottom says 'your modules have been downloaded and updated' (false).

The file in questions is set to 777 file permissions, and has group set to _www which is correct for Mac I think.

A better error message would help a lot. How about:

"Unable to remove to file /Library/WebServer/Documents/drupal/modules/webform/composer.json, as it belongs to the wrong group. Should be _www, see article XYZ"
OR
"Unable to remove to file /Library/WebServer/Documents/drupal/modules/webform/composer.json, due to a file permissions issue. Currently set to 600, should he 755, see article XYZ2"

I'm getting the following error. I don't know what to do. I've given 777 for file permissions and set the group correctly (AFAIK).

webform

Error installing / updating
File Transfer failed, reason: Unable to remove to file /Library/WebServer/Documents/drupal/modules/webform/composer.json
Next steps

Your modules have been downloaded and updated.

Comments

CatsFromStonehenge created an issue. See original summary.

CatsFromStonehenge’s picture

CatsFromStonehenge CreditAttribution: CatsFromStonehenge commented

Security fail! The only way around this was to set the file permissions and all the folder permissions to 777 (i.e. full access). Full read / write access by _www is not enough. Surely Drupal runs as _www on OSX? I might need to recursively make ALL files 777! Dreadful!

CatsFromStonehenge’s picture

CatsFromStonehenge CreditAttribution: CatsFromStonehenge commented

OK, so I was forced to do this. We don't seem to be using the write user on OSX to access files via drupal. It's forcing me to annihilate good security measures. Not cool.
sudo chmod -R 777 drupal/

cilefen’s picture

cilefen CreditAttribution: cilefen commented
Component: other » update.module
Issue tags: -module updates
Related issues: +#2717951: Update manager sometimes can't install modules using FTP due to file ownership issues, +#932110: On some servers, the Update Manager allows administrators to directly execute arbitrary code even without the PHP module
cilefen’s picture

cilefen CreditAttribution: cilefen commented

Documentation is at https://www.drupal.org/docs/8/core/modules/update/overview

Version: 8.2.x-dev » 8.9.x-dev

Drupal 8.8.7 was released on June 3, 2020 and is the final full bugfix release for the Drupal 8.8.x series. Branches prior to 8.8.x are not supported, and Drupal 8.8.x will not receive any further development aside from security fixes. Sites should prepare to update to Drupal 8.9.0 or Drupal 9.0.0 for ongoing support.

Bug reports should be targeted against the 8.9.x-dev branch from now on, and new development or disruptive changes should be targeted against the 9.1.x-dev branch. For more information see the Drupal 8 and 9 minor version schedule and the Allowed changes during the Drupal 8 and 9 release cycles.

Version: 8.9.x-dev » 9.2.x-dev

Drupal 8 is end-of-life as of November 17, 2021. There will not be further changes made to Drupal 8. Bugfixes are now made to the 9.3.x and higher branches only. For more information see the Drupal core minor version schedule and the Allowed changes during the Drupal core release cycle.

Version: 9.2.x-dev » 9.3.x-dev
quietone’s picture

quietone CreditAttribution: quietone at PreviousNext commented
Status: Active » Postponed (maintainer needs more info)
Issue tags: +Bug Smash Initiative

@CatsFromStonehenge, Thank you for reporting this problem. We rely on issue reports like this one to resolve bugs and improve Drupal core.

There has been no activity here for 5 years, perhaps this is no longer a problem?

Is anyone experiencing this problem on a supported version of Drupal? if so, reopen the issue, by setting the status to 'Active', and provide complete steps to reproduce the issue (starting from "Install Drupal core").

Since we need more information to move forward with this issue, I am keeping the status at Postponed (maintainer needs more info). If we don't receive additional information to help with the issue, it may be closed after three months.

Thanks!

Version: 9.3.x-dev » 9.4.x-dev

Drupal 9.3.15 was released on June 1st, 2022 and is the final full bugfix release for the Drupal 9.3.x series. Drupal 9.3.x will not receive any further development aside from security fixes. Drupal 9 bug reports should be targeted for the 9.4.x-dev branch from now on, and new development or disruptive changes should be targeted for the 9.5.x-dev branch. For more information see the Drupal core minor version schedule and the Allowed changes during the Drupal core release cycle.

quietone’s picture

quietone CreditAttribution: quietone at PreviousNext commented
Status: Postponed (maintainer needs more info) » Closed (outdated)

There hasn't been a reply here to confirm that this is still a problem. Time to close.