Robinson, thanks a lot for taking the time to reply.

Backups on VPS are done via cron by root.

I have root privileges too. But for security reasons, as mentioned, root via SSH is turned off, by me. For now, I don't want to use it, as I did for years.

I used working script via WinSCP, .BAT which starts now, and then stops because of the permissions problem, I think (this script worked fine for years when I used root account to download).

I used to run this script automatically on my PC via Task Scheduler every morning, before the problem with permissions appeared:

@echo off

"C:\Program Files (x86)\WinSCP\WinSCP.com" ^
 /ini=nul ^
 /command ^
   "open sftp://non-root-sudoer@domain.com:port#/ -hostkey=""ssh-###"" -privatekey=""G:\path\to\keys keys SSH\key.ppk"" -passphrase=""x"" -rawsettings PingType=X AgentFwd=X AuthKI=X" ^
   "cd /var/db/openproject/backup" ^
   "lcd ""G:\path\to\myPC\backupfolder""" ^
   "get -preservetime *" ^
   "exit"

set WINSCP_RESULT=%ERRORLEVEL%
if %WINSCP_RESULT% equ 0 (
 echo Success
) else (
 echo Error
)

exit /b %WINSCP_RESULT%

But I understand that basically, it is all about non-root-sudoer permissions: backup folder and files.

Do you know the exact chmod number which I should set up?

This is what I have got for the folder (the only possible from drop-down list owners are root and openproject):

And this is what I get for the files in the folder (the only owners available from the drop-down list are non-root-sudoer and openproject):

Do you have any ideas how to set it correctly?

I will be very grateful for any clues.

Cheers,

Piotr

Robinson Taylor wrote:

As a sudoer, you have elevated privileges to perform administrative tasks on the system, but you are not the root user. To download backup files as a sudoer, you can follow these general steps:

1. Open a terminal or command prompt on the system where the backup files are located.
2. Navigate to the directory where the backup files are stored.
3. Check the file permissions to ensure that the backup files are readable by the user account you are logged in as. You can use the "ls -l" command to view the file permissions.
4. Use the "sudo" command to execute the download command with elevated privileges. For example, if you want to download a file named "backup.tar.gz" using the "wget" command, you would run:

sudo wget http://example.com/backup.tar.gz

1. Enter your sudo password when prompted, if required.
2. Wait for the download to complete and verify that the backup file has been downloaded successfully. If you encounter any errors or permission issues while downloading the backup files as a sudoer, you may need to check the file permissions or consult with the root user or system administrator for further assistance.

Solved.

I should have downloaded all as openproject user.

Sorry for bothering.

Piotr