Tomcat needs only write access to the target directory (must not be the owner).
You start the backup process in the context of the tomcat user (cfexecute spawns a java process)
-
No, it’s only a matter of taste. cfscript is normally less verbose than the TAG versions.
-
you should never run tomcat (or any other service as a rule of thumb) as root. And of course security makes it much more complicated…