What are the recommended file permissions for the BSM operation?
There is no universal configuration for the file permissions because each hosting service has its own particular features. Generally, the user under which Apache runs must have permissions to read and write to files from scripts. However, if a shared hosting is the case, other users must not have a permission to read or write to your files. It is also recommended that a user can overwrite these files via FTP and download them form a script. The problem is that every hosting provider has their own security policy and their own settings. Some providers restrict access to other user files even with 777 permissions, some run Apache under the same user for each virtual host.
