diff --git a/scripts/upgrade b/scripts/upgrade
index 9fea8e7..64e2fe5 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -19,6 +19,12 @@ sudo chown -R www-data: $final_path
 sudo sed -i "s@PATHTOCHANGE@$path@g" /etc/nginx/conf.d/$domain.d/leed.conf
 sudo sed -i "s@ALIASTOCHANGE@$final_path/@g" /etc/nginx/conf.d/$domain.d/leed.conf
 
+# Files owned by root, www-data can just read
+sudo find $final_path -type f | xargs sudo chmod 644
+sudo find $final_path -type d | xargs sudo chmod 755
+sudo chown -R root: $final_path
+# www-data can write on plugins and cache
+sudo chown -R www-data $final_path/cache $final_path/plugins
 # Réglage de la langue choisie
 sudo sed -i "s@define('LANGUAGE','.*');@define('LANGUAGE','$language');@" $final_path/constant.php