Directory Permissions security issues...

For permissions, I’ve been giving the entire /assets folder full permissions; including any sub-folders permissions will be inherited. Can I also grant the ’core’ folder full permissions read-write-execute?
Just wondering if it makes sense to do things this way, or creates any huge vulnerabilites.

Maybe I should ask are there any folders that dare not have full permissions?

Trying to make myself a my own pre-installation checklist on permissions and creating directories ahead of time.
The assets folder does not get created on my host, I hope having it created and writable ahead of time, might make for a smoother install process.
Of course I’m hosted on IIS, so it’s a bit more PITA than apache

The only folders that should be writable in a normal situation are core/packages, core/components and assets/components. Most addons that involve writing files assume those and unless you’re doinv fancy stuff of your own outside those folders that really is all..

Thanks Mark that keeps it simple. My host is having issues thought maybe I missed something.
Time to change hosts.

What kind of issues?

Pretty much what is described in this thread:
http://modxcms.com/forums/index.php/topic,57360.0.html
My host enabled fastcgi, but still the same issues described there, so far.
I’ld love to stay with an IIS host to be able to test new technologies there.

My host is willing to make any tweaks necessary, but I don’t have a clue what to tell them is still the issue.
Maybe I could even try running the MSSql db but guessing that wouldn’t go any better, maybe worse.