File permissions are always set to 600 when an image is dragged to a folder, a folder in the Dock, or the Desktop. Expected behavior: should apply the system umask when saving the file. This shouldn't be a security issue, because the user is choosing a destination, the same as if the user had gone to the save file dialog.
Still present on my setups, the latest release (23.0.1) on 10.6.8, and the latest UX (26.0a1 2013-08-28) on 10.8.4. Bug 624995 fixed the permissions for saving images through the save dialog, but not for dragging. Steps to reproduce: 1. In Firefox, browse to any image (say, http://mozorg.cdn.mozilla.net/media/img/sandstone/buttons/download-arrow-small.png). 2. Right-click on image, then click "Save Image As...". Save to desktop. 3. Check the permissions of the saved image. On a standard setup, this is 644 (rw-r--r--), as expected. 4. Now delete the saved image. 5. Back in Firefox, drag the image to desktop. 6. Check the permissions of the newly saved image. Actual result: The image is given the permission 600 (rw-------). Expected result: Permission should be 644 (rw-r--r--).
I can reproduce this issue with latest Aurora 28.0a2 (build ID: 20131223004002 in 32-bit mode, on Mac OS X 10.6.8.
Status: UNCONFIRMED → NEW
Ever confirmed: true
This bug is still present. Reproducible with Latest 41.0.1 on OSX 10.10.5 (and 10.9.5) ZZ's steps to reproduce above still produce the same result, ie: Right click - Save As respects the umask set by the OS Drag and Drop to folder DOES NOT respect the umask set by the OS
This bug is still present in Stable 57.0.4 (64-bit) seemingly on all OSX versions(tested 10.12.6, 10.10.5, 10.9.5.) ZZ's steps to reproduce above still produce the same result, ie: Right click - Save As respects the umask set by the OS Drag and Drop to folder DOES NOT respect the umask set by the OS, file is written with mode 600 (rw-------). Perhaps the title should be changed to "drag-and-drop save does not respect system umask" ?
You need to log in before you can comment on or make changes to this bug.