this documentation provides settings to setup the permissions on a system without ACL:
https://confluence.ez.no/pages/viewpage.action?pageId=12125276

the examples are not clear. it is not explained that on systems without acl cache files generated will get permissions only for the user that created them. there are two cases:

• after issuing the commands, if a console command is immediately run that changes caches, Sf will make those caches available only to the cli user, so it causes errors on the website.
• on a running site, console commands that changes files, such a ezpublish/console cache:clear will show an error with writeable permissions and abort.

currently the setting of permissions must be performed every time before/after a cli command, or the command must be run with the "su" command for www-data, or equivalent user.