这与用户的权利无关。当然，要运行的 Web 应用程序必须具有访问所有必需文件所需的权限，但这与尝试从浏览器访问 URL 的用户无关。
您可以为文件设置适当的权限，以便登录用户无法手动导航到目录并开始修改需要保护的文件，但这与 Web 应用程序本身无关。
There is a confusion on your part here.
You will have a user that uses a browser to send requests to a web app.
This is unrelated to the users rights. The web application to function would have to have of course the necessary priviliges to access all the required files but this is irrelevant to the user trying to access a URL from a browser.
You can set the appropriate permissions to the files so that a logged in user can not manually navigate to the directories and start modifying the files needing protection but this is not related to the web application itself.
发布评论
评论（1）
你这里有一个困惑。
您将拥有一个使用浏览器向 Web 应用程序发送请求的用户。
这与用户的权利无关。当然，要运行的 Web 应用程序必须具有访问所有必需文件所需的权限，但这与尝试从浏览器访问 URL 的用户无关。
您可以为文件设置适当的权限，以便登录用户无法手动导航到目录并开始修改需要保护的文件，但这与 Web 应用程序本身无关。
There is a confusion on your part here.
You will have a user that uses a browser to send requests to a web app.
This is unrelated to the users rights. The web application to function would have to have of course the necessary priviliges to access all the required files but this is irrelevant to the user trying to access a URL from a browser.
You can set the appropriate permissions to the files so that a logged in user can not manually navigate to the directories and start modifying the files needing protection but this is not related to the web application itself.