How to set permissions on virtual folders

[ElPistoler0]

Hi!

Still tweaking your awesome proxy!

Is there a way to set read-only perms for each virtual directory?

Thanks!

F.

[orware]

I think you should be able to use something like one of the examples commented out in the example configuration.php file:

By default the * permission set is used which enables all of the different permissions SFTPGo would allow on that directory, so if you swap that out first a more limited set of permissions like array("list", "download") that should limit what the users can do with that directory over SFTP. (I'm a little fuzzy on the details but I think I learned of the "list" and "download" options via what you can see when attempting to create a user manually within the SFTPGo web interface...I think there's a separate file in the SFTPGo repo that documents everything as well but the web interface is probably a good quick reference to see what the other permissions might be).

I believe this might be an additional handy reference as well from the SFTPGo repo directly:
https://github.com/drakkan/sftpgo/blob/main/openapi/openapi.yaml#L4384-L4400

[ElPistoler0]

Duuuuuude... Gracias!

I will keep playing with the perms. I was successful in setting the perms I want, and verified via the web interface.

This is a snippet of the code I used:

$connection_output_objects['users'] = [
'status' => 1,
'username' => '',
'expiration_date' => 0,
'home_dir' => '',
// Need to comment the virtual_folders entry out:
//'virtual_folders' => array(
//$privateFolderName
//),
'uid' => 0,
'gid' => 0,
'max_sessions' => 0,
'quota_size' => 0,
'quota_files' => 100000,
'permissions' => [
"/Incoming" => ["*"],
"/" => array("list", "download"),
"/Media" => array("list", "download"),
],