diff --git a/scripts/function/permission/libreportal_folders.sh b/scripts/function/permission/libreportal_folders.sh
index 89b01c1..ad8e586 100755
--- a/scripts/function/permission/libreportal_folders.sh
+++ b/scripts/function/permission/libreportal_folders.sh
@@ -22,8 +22,10 @@ reconcileDockerOwnership()
     local mode="${1:-$CFG_DOCKER_INSTALL_TYPE}"
     [[ -d "$docker_dir" ]] || return 0
 
-    local owner="root"
-    [[ "$mode" == "rootless" ]] && owner="$sudo_user_name"
+    # The control plane is owned by the MANAGER user in BOTH modes. root:root was
+    # never the intended model — it only ever showed up as an artifact of
+    # un-de-sudo'd commands (sudo creating files as root instead of libreportal).
+    local owner="$sudo_user_name"
 
     # Swap ONLY the owner on our own control-plane files; never reset mode bits
     # (so nothing that validates its permissions gets surprised). The only two