File and folder permissions

To ensure a stable and smoothly running umbraco installation, these permissions need to be set correctly. These permissions should be setup before or during the insallation of umbraco. The user with the permissions set are the user used by the Application Pool used by the IIS website (usually Network Service or the IIS_IUSRS group). If in doubt, ask your server admin / hosting company. Generally if you are using WebMatrix, permissions don't need to be strictly applied

File / folder Permission Comment
/Web.config Modify / Full control

Only needed for setting database and version Information during installation. So can be set to read-only afterwards for enhanced security

/App_Code Modify / Full control

Should always have modify rights as the folder and its files are used for dynamically loading in and generating dlls

/App_Data Modify / Full control

Should always have modify rights as the folder and its files are used for cache and storage

/App_Plugins Modify / Full control

Should always have modify rights as the folder and its files are used by packages

/Bin Modify / Full control

Needed for installing packages, if no packages are installed, this can be set to read accees only

/Config Modify / Full control

Only needed for setting database and version Information during installation. So can be set to read-only afterwards for enhanced security

/Css Modify / Full control

Should always have modify rights as the folder and its files are used for css files

/Masterpages Modify / Full control

Should always have modify rights as the folder and its files are used for template files

/Media Modify / Full control

Should always have modify rights as the folder and its files are used for media files uploaded via umbraco cms interface

/Scripts Modify / Full control

Should always have modify rights as the folder and its files are used for script files

/Umbraco Modify / Full control

For upgrades and package installation, it should have modify rights, but can be set to read-only afterwards

/Umbraco_client Modify / Full control

For upgrades and package installation, it should have modify rights, but can be set to read-only afterwards

/UserControls Modify / Full control

Modify rights are needed for installing packages

/Views Modify / Full control

Should always have modify rights as the folder and its files are used for template, partial view and macro files

/Xslt Modify / Full control

Should always have modify rights as the folder and its files are used for macro files