Every request your server answers runs as somebody: Apache 129 as www-data, each PHP-FPM pool as its own account, your deploy script as you. A 403 or a Permission denied in storage/logs is nearly always a mismatch between one of those identities and a file's owner, group and mode. The second half grants extra power in the smallest dose.
MENU
Users and Permissions
Users, Groups, Permissions and sudo