suggestion : add user permission delete_dirs

[guedz]

Hello,

I unfortunately have a few users who delete the destination folder for their upload, which then generates errors on their side and therefore on the support.
Is it possible to add the possibility to prohibit the deletion of folder?

Best regards

[drakkan]

Hi,

supposing your upload directory is /upload you can remove the delete permission on / and allow any permission for /upload. This should solve your issue if I understand it correctly

[guedz45]

Hi,

in general i have many cases.
In example, /upload/invoices, /upload/pdf, /upload/invoices/xml etc...
Manage with linux, windows, macos folder permissions can be difficult.
If we have the permission create_dir, it's for me more simple to have delete_dir (as https://mysecureshell.readthedocs.io/en/latest/tags/childs/disableremovedir.html)
i think it"s more simple to disallow rmdir command than manage folder permissions and i need to have the possibility to delete file after download but not delete folder.
Best regards

[drakkan]

Hi,

in general i have many cases. In example, /upload/invoices, /upload/pdf, /upload/invoices/xml etc... Manage with linux, windows, macos folder permissions can be difficult. If we have the permission create_dir, it's for me more simple to have delete_dir (as https://mysecureshell.readthedocs.io/en/latest/tags/childs/disableremovedir.html) i think it"s more simple to disallow rmdir command than manage folder permissions and i need to have the possibility to delete file after download but not delete folder. Best regards

I mean virtual permissions, please take a look here. Permissions apply recursively so if you remove the delete permission you will not be able to delete anything if you don't override the permissions on a per-directorry basis.

Currently we have a generic delete permissions that apply to both files and directories I could also evaluate to add more specific permissions, for example delete_dir, delete_file a sponsorship will help. Thanks

[drakkan]

Hi,

this is now supported ca730e7

[guedz45]

Hi Drakkan,
really thank you very much for your work.
I will test all of this as soon as possible.
I take advantage of my post to ask if there are any limitations on the number of simultaneous connections, max accounts created with sftpgo.
In some solutions even with the parameter to 0 for unlimited there are limitations related to the code (example) as for SSH where the AllowUsers lines are limited in the code to 256 unless we modify the source code and we recompile ourselves .

Thansk again
Best regards

[drakkan]

Hi,

the SFTPGo code has no limitations, you are limited from the hw resources.

I am not aware of such limitations in the libraries used in SFTPGo.

If you plan to have many concurrent client connections, on Linux you have to increase the open file limit. If you use the provided systemd unit this limit is 8192 that should be enough for most use cases.