The CMakeLists.txt file explicitly installs the desktop file with permissions 755.
This also apply to a lot of KDE programs.
Steps to Reproduce:
1. Build and install korganizer
2. Check for the desktop files permissions.
Permissions are set to 755
Permissions should be 644
I think that is actually convention or even policy in KDE (for security reason?), but unfortunately I can't find any (in)formal reference...
644 is secure, 755 is not.
KDE requires 755 for executing .desktop files, just like unix requires 755 to execute scripts and programs.
So this is actually a security measure.
See the full discussion here:
Of course for compat reasons, KDE can also run non-executable desktop files if they come from the install prefix, but installs them as executable from now on, so that this can be fully required at some point, and so that other environments or setups will execute them.