Hello!

I have a client that is installing opencms, or trying.
These catalogs is owned by root.

How can that be possible and is this not a huge security issue ??