Ntfs file permission for server install

[nono]

Hello,

why does the "filezilla server.xml" file need write permission for the service account (I'm using a specific non privileged account) ? If I only give read permission for this account on this file, the service does not start.

I agree that if this account did not have write permission, it was not possible to modify configuration with graphic interface, but it would be possible to do it in xml with a text editor. With a read only permission for execution account, a code vulnerability would not allow anymore an attacker to modify configuration file.

Thanks for you answers.