Database file permissions

[celloandy]

First, an initial disclaimer: this is not a Gentoo question, so if posting off-topic is a problem, I apologize, but I haven't had any luck elsewhere and have found, in general, that people here are more knowledgable than most about Unix/Linux issues, so I figured it was worth a go. Sorry if that's a problem.

I'm working a web site for a student organization at my university that will go on the school's main webserver, and will be written in Coldfusion (unfortunately, that's the only option). Student organizations don't have access to the database server, so I'm planning on using the SmallSQL file-based SQL engine for minimal database stuff via JDBC. My issue, though, is that I need to be able to read and write to the database, but the script will run as the webserver user (I think... there may be a separate ColdFusion user, but I don't think so), so the only way I've been able to get the thing to work is to make the database files world-writeable, but that makes me really nervous, as it's a shared system. I thought about trying to figure out some way of forking a separate process to do the database work and setuid'ing it, but I don't think ColdFusion will let me do that. Any thougts on how I might go about letting my scripts manipulate my DB without letting the whole world write to it?

Andrew

(Oh, and the machine is running Solaris 9 and Apache, if it matters.)

[jonnevers]

[celloandy]

[thepustule]

world-writeable should not be necessary.

Just use a group.

[celloandy]