APS installations / deletions alters permissions
I did realize that when an APS is installed or deleted (from the root folder /web) it resets ALL the permissions of the contents of /web/* to:
web%NO%:client%NO% (Where NO is that unique ID set for every client)
Basically some folders within /web are to belong to the root eg /web/stats belongs to root:root After the APS actions above, now the user has FULL access to /stats/ which is dangerous and can cause problems ..
Joseph