.js file with permissions 640, owned by apache user cannot be accessed thru browser
 

I have an occurrence in a web server:

- the permissions of a .js file are 640 user user
- the .js file won't be read by the web browser (403 - Permission Denied)
- .php files of the same permission can be parsed and return html
- echo exec('whoami'); in a php file echoes 'user' in the browser

So, i'm just not sure what user is grabbing the js files and why this is different from whose running the php file. I would assume if 'whoami' through php is 'user' and permissions are 640 user user, the web browser would be able to grab a .js file. Can you explain?

Thanks.

Hi
did you tested with 644?
it would be good to have it at least working before debugging user permissions ¿don't you think?

Yes, of course 644 works.

It turns out the apache user was "nobody" - any idea why 'whoami' through php returns 'user'?