copr-be: cleanup after today's debugging

roles/copr/backend/tasks/resalloc.yml

@@ -128,11 +128,7 @@
     path: "/var/lib/resallocserver/resalloc_provision/"
     owner: resalloc
     group: resalloc
-    # The mode 'u=rwX,g=,o=' achieves the required complex permissions:
-    # - u=rw: Base 600 permissions for owner.
-    # - X: Adds executable bit only if path is a directory (700) or was already executable (700).
-    # - g=,o=: Explicitly removes permissions from group and others (resulting in D700/F600).
-    mode: 'g=,o='
+    mode: 'g-rwx,o-rwx'
     state: directory
     recurse: yes
   tags: