Using Linux Groups

• Ubuntu 20.04.4
• nginx
• php-fpm
• Lavel9
• php8.1

Why did I add a user to a Linux group but they say I don't have write privileges?

Event

I started up a server in Ubuntu to create a web service using VPS.
In this case, apart from root, we have an account called admin to work on.

I wanted to deploy on CI in GitLab, so I created a web group to take this opportunity to get around my authority.

$sudo groupadd web

And I added admin users and www-data users because I use Nginx.

$sudo usermod-aG web admin
$ sudo usermod-aG webwww-data

Finally, we changed the owner permissions of DocumentRoot.

$sudo town-Radmin:web/var/www/html/

Now that you have access to the site on the VPS,

I get an error that says I can't write a file during PHP processing. A 500 error was returned.

So I changed my DocumentRoot access to 765.

$sudo find/var/www/html/-type d-print|xargs sudo chmod765

However, the situation remained the same.

Therefore, I changed the owner permission of DocumentRoot to www-data.

$sudo town-Rwww-data:www-data/var/www/html/

Then it worked.

Question

うまくI want to know why it doesn't work
Why doesn't this work?

The "web" group also includes www-data users, so
I think I can read and write, but is this recognition wrong?

正常How can I make it work properly?
Both dadmin ユーザ and -www-data ユーザ users can work with this directory.
How do I get the web service to work properly?

そもそも Is this idea of building an environment correct in the first place?
I'm studying infrastructure, so I'm not familiar with it, but
Is it okay to think like this?
www-data:www-data would work better?

I would appreciate it if you could let me know if anyone understands the above.
Thank you for your cooperation.

May 17, 2022

(1)Change user from www-data

 sudo chown-Radmin:web/var/www/html/

(2)Change directory permissions to 2775

 sudo find/var/www/html-type d-print | xargs sudo chmod 2775

So far, the site has been displayed, but PHPWord who creates a word file will give an error.

Unable to set visibility for file docx.{"userId":1, "exception":"[object] (League\\Flysystem\\UnableToSetVisibility (code:0):Unable to set visibility for file docx.

In order to change the permission of the file, I added the following:

find/var/www/html-type f-print | xargs chmod 664

However, the error could not be resolved, so I put it back once.