[1.6.x] Fixed #12670 -- Added a note about permissions of files stored in FILE_UPLOAD_TEMP_DIR.

Thanks simon29 for the suggestion.

Backport of 355572ac56 from master
This commit is contained in:
Rik 2014-02-22 13:07:50 +01:00 committed by Tim Graham
parent 985d0865a3
commit dde67de0f6

View File

@ -164,6 +164,9 @@ Three settings control Django's file upload behavior:
of ``0600``, and files saved from memory will be saved using the of ``0600``, and files saved from memory will be saved using the
system's standard umask. system's standard umask.
For security reasons, these permissions aren't applied to the temporary
files that are stored in :setting:`FILE_UPLOAD_TEMP_DIR`.
.. warning:: .. warning::
If you're not familiar with file modes, please note that the leading If you're not familiar with file modes, please note that the leading