diff --git a/scripts/upgrade b/scripts/upgrade
index 3e0561c..725465f 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -117,6 +117,10 @@ then
 	ynh_secure_remove --file="$tmpdir"
 fi
 
+chmod 750 "$final_path"
+chmod -R o-rwx "$final_path"
+chown -R $app:www-data "$final_path"
+
 #=================================================
 # NGINX CONFIGURATION
 #=================================================