Webser file permissions [closed]

view story

http://serverfault.com – Possible Duplicate: What are the best linux permissions to use for my website? I have a debian system. currently /var/www is owned (also group owned) by root I have two problems. I want to be able to create users that can edit directories under /var/www . I am guessing I need to create a new group (ie: webdev) and give read/write permissions for /var/www. Also some scripts need to write to some directories. So I need to make these directories writable to group www-data. Is this setup correct and safe. Is there anything else to make this setup more secure or is there a complet (HowTos)