Fix access rights

Author: ildyria

docker/scripts/05-permissions-check.sh

@@ -27,30 +27,36 @@ find /app/bootstrap/cache -type d \( ! -perm 750 \) -exec chmod 750 {} + 2>/dev/
 # Files: 640 for sensitive, 644 for public
 find /app/storage -type f \( ! -perm 640 \) -exec chmod 640 {} + 2>/dev/null || true
 find /app/bootstrap/cache -type f \( ! -perm 640 \) -exec chmod 640 {} + 2>/dev/null || true
-echo "✅ Permissions set securely"
+
+echo "⏰ Set Permissions for dist folder..."
+# dist ships baked-in files (e.g. user.css, custom.js) that must always be
+# writable by www-data, regardless of SKIP_PERMISSIONS_CHECKS
+find /app/public/dist -type d \( ! -user "www-data" -o ! -group "www-data" \) -exec chown "www-data":"www-data" {} + 2>/dev/null || true
+find /app/public/dist -type f \( ! -user "www-data" -o ! -group "www-data" \) -exec chown "www-data":"www-data" {} + 2>/dev/null || true
+find /app/public/dist -type d \( ! -perm 755 \) -exec chmod 755 {} + 2>/dev/null || true
+find /app/public/dist -type f \( ! -perm 644 \) -exec chmod 644 {} + 2>/dev/null || true
 
 # Safely check SKIP_PERMISSIONS_CHECKS
 skip_check="${SKIP_PERMISSIONS_CHECKS:-no}"
 
 if [ "$skip_check" = "yes" ] || [ "$skip_check" = "YES" ]; then
   echo "⚠️ WARNING: Skipping upload permissions check"
 else
-  echo "⏰ Set Permissions for Upload/dist folders (this may take a while)..."
+  echo "⏰ Set Permissions for Upload folder (this may take a while)..."
 
   # More restrictive permissions - no world-readable for sensitive directories
   # Only set permissions on writable directories that need it
 
-  # Ensure www-data owns necessary directories
+  # Ensure www-data owns necessary directories and files
   find /app/public/uploads -type d \( ! -user "www-data" -o ! -group "www-data" \) -exec chown "www-data":"www-data" {} + 2>/dev/null || true
-  find /app/public/dist -type d \( ! -user "www-data" -o ! -group "www-data" \) -exec chown "www-data":"www-data" {} + 2>/dev/null || true
+  find /app/public/uploads -type f \( ! -user "www-data" -o ! -group "www-data" \) -exec chown "www-data":"www-data" {} + 2>/dev/null || true
 
   # Upload directories need 755 for web serving
   find /app/public/uploads -type d \( ! -perm 755 \) -exec chmod 755 {} + 2>/dev/null || true
-  find /app/public/dist -type d \( ! -perm 755 \) -exec chmod 755 {} + 2>/dev/null || true
 
   # Files: 640 for sensitive, 644 for public
   find /app/public/uploads -type f \( ! -perm 644 \) -exec chmod 644 {} + 2>/dev/null || true
-  find /app/public/dist -type f \( ! -perm 644 \) -exec chmod 644 {} + 2>/dev/null || true
 
-  echo "✅ Permissions set securely"
 fi
+
+echo "✅ Permissions set securely"