tracker issue : CF-3114274

select a category, or use search below
(searches all categories and all time range)
Title:

Bug 87273:-(Watson Migration Closure)file uploaded by CFFILE action "upload" inherits ColdFusion Temp Directory permission, instead of upload destination directory permission CFFILE action "write" doesn't have this problem

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): / Paulus Junior Lazuardi (Vamseekrishna Nanneboina)

Created: 01/17/2012

Components: File Management, VFS-S3

Versions: 9.0

Failure Type: Unspecified

Found In Build/Fixed In Build: 0000 / CF11 Update5

Priority/Frequency: Trivial / Unknown

Locale/System: English / Win All

Vote Count: 0

Listed in the version 11.0.05.293506 Issues Fixed doc 
Problem:

file uploaded by CFFILE action "upload" inherits ColdFusion Temp Directory permission, instead of upload destination directory permission
CFFILE action "write" doesn't have this problem
Method:

1. upload a file using "CFFILE action upload" to a folder (this folder has read permission for IIS account, and child objects inherit the permission of this folder)
2. IIS can't read the uploaded file
Result:

file uploaded by CFFILE action "upload"  inherits permission from ColdFusion temp directory, not upload destination directory permission
CFFILE action "write" doesn't have this problem.

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3114274

External Customer Info:
External Company:  
External Customer Name: Paulus Junior Lazuardi
External Customer Email: pjlazuardi@indodev.com
External Test Config: 01/17/2012

Attachments:

Comments:

Bug History Timestamp|name|field|from value|to value| 16 Jan 2012 20:49:32 GMT | System System | Severity | | 6-Low (Easy workaround & only affects small group) | 16 Jan 2012 20:49:32 GMT | System System | Class Type | | Bug | 16 Jan 2012 20:50:17 GMT | Paulus Junior Lazuardi | Bug Submitted | | |
Comment by Kunal S.
20809 | February 15, 2012 12:18:27 AM GMT
Issue is fixed. Hence, closing this bug. (Comment added from ex-user id:prk)
Comment by Adobe D.
20810 | January 22, 2015 04:49:13 AM GMT
The fix for this bug is available in the pre-release build of ColdFusion 11 Update 5
Comment by CFwatson U.
20811 | February 20, 2015 09:24:55 AM GMT
This is manual testcase and testcase location: //depot/qa/cf/regression/chfsuite11/cf11u4/CF-3114274/Fileupload_CF-3114274.cfm (Comment added from ex-user id:prk)
Comment by Adobe D.
20812 | November 04, 2015 07:36:09 AM GMT
Unable to reproduce the error in CF10 and CF11 Update 4 (build 11,0,04,293328) on Windows 10 and Windows 2012 R2. The file uploaded by <cffile action="upload"..> successfully inherited the inheritable permissions from the destination directory (not the getTempDirectory() directory). I added differing additional permissions to both directories, and the file always inherited the permissions from the destination dir and never from CF's temp dir. I deleted the uploaded file after each test for good measure. Basically, I did not see the bug. The code: <cfif structKeyExists(FORM, "submit")> <cffile action="upload" filefield="filedata" destination="#expandPath('./uploads')#" nameconflict="overwrite"> </cfif> <form method="post" enctype="multipart/form-data"> <input type="file" name="filedata"> <input type="submit" name="submit" value="submit"> </form> <cfoutput>#getTempDirectory()#</cfoutput> Thanks!, -Aaron
Comment by External U.
20813 | November 19, 2015 01:52:44 AM GMT