In Magento 2 we have a new filesystem permissions guidelines.
Reading this link I understand that Magento requires php user inside
What I do not understand is why
static filesystem permissions are generated using
0770 instead of
With this kind of permissions another user in the same server and belonging to
www-data group will be able to modify all my files.
Isn't it dangerous? Is there any reason for this?
I know the Magento 2 approach is to always have a dedicated VM and I agree with it, but I do not see any good reason for this permissions settings.