I consider giving web application write access to it’s own files as fundamentaly broken from security perspective - that’s just too high risk I’m not willing to accept.
But I would also like to have application up-to-date. Right now, when there is an update I log into server, temporarily set those permissions, do update and remove them. Which is lot of unnecessary manual work.
Is there some way I can run those updates from command line, launched from cron?