Dear marcie73,
Yes, this is correct. You can change the access rights to the configuration by assigning the user who runs the web-server as the owner. Or you can close access to the cdata folder using .htacce
by assigning the owner of the user who runs web-server. Or close access to the folder via the cdata .htacce

Dear admin, thank you for you reply. I need only to discover what need to put in the htaccess.... I will.

Only by using 777 chmod for all enclosing file in cdata, options in the system config sdmin panel are finally saved. Is that correct? It seems like not very safe though. Thanks.