This is a debian webapp policy problem : redmine sticks to it and run as www-data. I agree it'd be best to run each webapp with a www-data-<webappname> user. I'll propose something if i have some time. Jérémy.