{"id":1406,"date":"2025-11-24T05:25:00","date_gmt":"2025-11-23T20:25:00","guid":{"rendered":"https:\/\/touhyo.com\/blog\/?p=1406"},"modified":"2025-11-24T23:43:26","modified_gmt":"2025-11-24T14:43:26","slug":"ftp-user-permissions","status":"publish","type":"post","link":"https:\/\/touhyo.com\/blog\/en\/ftp-user-permissions\/","title":{"rendered":"FTP User Permissions"},"content":{"rendered":"\n<p>Companies without server engineers must select personnel for website maintenance.<\/p>\n\n\n\n<p>When assigning tasks to external staff, be mindful of security and strive to minimize their permissions. Having personnel outside the organization with full access to the server poses a risk and could lead to trouble. Do not grant them all access privileges.<\/p>\n\n\n\n<p>As for the mechanism, issuing an &#8220;FTP user&#8221; is sufficient.<\/p>\n\n\n\n<p>If the server supports &#8220;.htaccess&#8221; files, specify the accessible locations and prohibited areas for the issuing user. The basic rule is to prohibit access to important files.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki monokai\" style=\"background-color: #272822\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F8F8F2\">Access Permissions:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\">public_html\/example.com\/<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\"><\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\">Block specific users only:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\">public_html\/example.com\/secret\/<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>If using the above rules, save the following as &#8220;.ftpaccess&#8221; in the &#8220;secret&#8221; directory.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><pre class=\"shiki monokai\" style=\"background-color: #272822\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F8F8F2\">&lt;Limit ALL&gt;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\">\tDenyUser Username<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F8F8F2\">&lt;\/Limit&gt;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>Some servers do not support &#8220;.ftpaccess&#8221; files. In such cases, it is recommended to assign permissions per FTP user and pre-define accessible directories.<\/p>\n\n\n\n<p>There are various ways to do it, so please choose the best method for you.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Companies without server engineers must select personnel for website maintenance. When assigning tasks to external staff, be mindful of security and strive to minimize their permissions. Having personnel outside the organization with full access to the server poses a risk and could lead to trouble. Do not grant them all access privileges. As for the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_locale":"en_US","_original_post":"https:\/\/touhyo.com\/blog\/?p=1401","footnotes":""},"categories":[1],"tags":[],"class_list":["post-1406","post","type-post","status-publish","format-standard","hentry","category-memo","en-US"],"_links":{"self":[{"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/posts\/1406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/comments?post=1406"}],"version-history":[{"count":5,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/posts\/1406\/revisions"}],"predecessor-version":[{"id":1490,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/posts\/1406\/revisions\/1490"}],"wp:attachment":[{"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/media?parent=1406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/categories?post=1406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/touhyo.com\/blog\/wp-json\/wp\/v2\/tags?post=1406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}