Uploaded files no longer inherit the destination directory's permissions

Description

In Lucee 5.3.3.62 and before, when you upload a file it will inherit the ACL permissions of the destination directory.

In 5.3.4.77, an uploaded file does not inherit the destination folder's permissions. Instead it keeps the permissions of the current temp directory (i.e. as returned by GetTempDirectory() ).

Steps to reproduce (on Windows):

1) Create a folder into which a file will be uploaded, and add a permission not present on the current temp directory, for example grant Read permissions to ANONYMOUS LOGON.
2) Create a script to upload a file to this folder, e.g

3) Upload a file and look at the permissions of the uploaded file. In my tests, a file uploaded with Lucee 5.3.3.62 has the additional Anonymous Read permission, on Lucee 5.3.4.77 it does not.

Environment

OS: Windows, Java: OpenJDK 11.0.6.10

Assignee

Michael Offner

Reporter

Julian Halliwell

Priority

New

Labels

None

Fix versions

None

Affects versions

Configure