File permissions

For Bazaar to install, de-install and update extensions we are running composer actions behind the scenes. To prevent any fatal catastrophe dependencies are resolved, a temporary directory is created (vendor2) and once everything looks okay, the composer.json and -lock files are updated and the old vendor map is replaced.

For this to work effortlessly Bazaar requires write access to some of the Flarum directories and files. Here is a list and the exact reason for writing:

• / (not subdirectories) for creating the vendor2 folder
• /vendor so we can replace it with the new vendor folder
• composer.json to add or remove extensions
• composer.lock to set the specific version of an extension