file permission security worries

[Carlo Gambino]

I wasn't sure if I should make this a new thread, apologies if not.

The mention of file permission security came up while I'm working to configure my server. Currently, Apache looks for web files in /var/www which is owned by user and group root. The only other user set up on the machine currently is called administrator, and will only be used during setup and repair of the server.

I presume it's more secure to chown of the directory than to add more users to the root group?

This would not change Apache's view of the files it's serving, it would simply change the permission of what users are able to do what to the files- right?