Permissions and owner of Yii2 folders, www-data on everything?

Question

Access rights

Hello. I'm new, please help!
Given: nginx+php-fpm server
Task: security-correct permissions and framework folder owners.
Can't decide who should be the owner. There is a www-data user (nginx user), there is a user, there is a root. Root was forgotten. Further. the /web folder of the framework is accessible from the web, index.php lives in it, everything else lives a level above . The framework was set from under the user user through Composer and, accordingly, it is not possible to generate files from Gii.
What to do? All to create from under www-data? Or is it not correct?
Yii2 install via composer

Answer 1

you for development or for production?
in general, a good option is the owner user, group www-data. the group has read-only rights, where necessary - write.