688944 - File permissions set incorrectly when drag-and-drop save is used

Status: NEW

(Firefox :: File Handling, defect)

Description

[Brent Laabs]

File permissions are always set to 600 when an image is dragged to a folder, a folder in the Dock, or the Desktop.  Expected behavior: should apply the system umask when saving the file.

This shouldn't be a security issue, because the user is choosing a destination, the same as if the user had gone to the save file dialog.

Comment 1

[ZZ]

Still present on my setups, the latest release (23.0.1) on 10.6.8, and the latest UX (26.0a1 2013-08-28) on 10.8.4.

Bug 624995 fixed the permissions for saving images through the save dialog, but not for dragging.

Steps to reproduce:
1. In Firefox, browse to any image (say, http://mozorg.cdn.mozilla.net/media/img/sandstone/buttons/download-arrow-small.png).
2. Right-click on image, then click "Save Image As...". Save to desktop.
3. Check the permissions of the saved image. On a standard setup, this is 644 (rw-r--r--), as expected.
4. Now delete the saved image.
5. Back in Firefox, drag the image to desktop.
6. Check the permissions of the newly saved image.

Actual result:
The image is given the permission 600 (rw-------).

Expected result:
Permission should be 644 (rw-r--r--).

Comment 2

[Manuela Muntean [Away]]

I can reproduce this issue with latest Aurora 28.0a2 (build ID: 20131223004002 in 32-bit mode, on Mac OS X 10.6.8.

Comment 3

[B E]

This bug is still present.

Reproducible with Latest 41.0.1 on OSX 10.10.5 (and 10.9.5)

ZZ's steps to reproduce above still produce the same result, ie:
Right click - Save As respects the umask set by the OS
Drag and Drop to folder DOES NOT respect the umask set by the OS

Comment 4

[B E]

This bug is still present in Stable 57.0.4 (64-bit) seemingly on all OSX versions(tested 10.12.6, 10.10.5, 10.9.5.)

ZZ's steps to reproduce above still produce the same result, ie:
Right click - Save As respects the umask set by the OS
Drag and Drop to folder DOES NOT respect the umask set by the OS, file is written with mode 600 (rw-------).

Perhaps the title should be changed to "drag-and-drop save does not respect system umask" ?