wsgi - narrow user permissions

Question

I have following Apache configuration and my application is working fine:

<VirtualHost *:80>
    ServerName ig-test.example.com
    WSGIScriptAlias / /home/ig-test/src/repository/django.wsgi
    WSGIDaemonProcess ig-test user=ig-test
</VirtualHost>

But I want to protect my files from other users, so I do:

chown ig-test /home/ig-test/ -R
chmod og-rwx /home/ig-test/ -R

And application stops working:

(13)Permission denied: /home/ig-test/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable

Is it possible to achieve what i'm doing with wsgi? If I have to give read permissions to some files it will be fine. But there are files I have to protect (like file with DB configuration or business logic of application).

Answer 1

From what I'm seeing right now in a site of mine: the directory structure up until your wsgi file needs to be accessible (+rx) to your webserver (or to everybody).