set owner to root and the group to deploy.
update recipes to set the correct permissions for cache and logs directory using ACL.