From d612792593ed75067f6ca0eb5a1ff3472d9ceef8 Mon Sep 17 00:00:00 2001
From: Jakob Ketterl <jakob.ketterl@gmx.de>
Date: Thu, 18 Feb 2021 21:07:45 +0100
Subject: [PATCH] update permissions on write

---
 owrx/users.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/owrx/users.py b/owrx/users.py
index 0fc5c0c..be103b1 100644
--- a/owrx/users.py
+++ b/owrx/users.py
@@ -4,6 +4,7 @@ from datetime import datetime, timezone
 import json
 import hashlib
 import os
+import stat
 
 import logging
 
@@ -189,6 +190,8 @@ class UserList(object):
             jsonContent = json.dumps(users, indent=4)
             with open(usersFile, "w") as f:
                 f.write(jsonContent)
+            # file should be readable by us only
+            os.chmod(usersFile, stat.S_IWUSR + stat.S_IRUSR)
         except Exception:
             logger.exception("error while writing users file %s", usersFile)
         self.refresh()