From 355572ac56389a8d02cb93ea6a859e0d546bc6fb Mon Sep 17 00:00:00 2001 From: Rik Date: Sat, 22 Feb 2014 13:07:50 +0100 Subject: [PATCH] Fixed #12670 -- Added a note about permissions of files stored in FILE_UPLOAD_TEMP_DIR. Thanks simon29 for the suggestion. --- docs/topics/http/file-uploads.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/topics/http/file-uploads.txt b/docs/topics/http/file-uploads.txt index 4a2525bffe..3d4b1a9bdd 100644 --- a/docs/topics/http/file-uploads.txt +++ b/docs/topics/http/file-uploads.txt @@ -164,6 +164,9 @@ There are a few settings which control Django's file upload behavior: of ``0600``, and files saved from memory will be saved using the system's standard umask. + For security reasons, these permissions aren't applied to the temporary + files that are stored in :setting:`FILE_UPLOAD_TEMP_DIR`. + .. warning:: If you're not familiar with file modes, please note that the leading