stable
Clone or download
Read-only
request #11448: Sysadmins should be able to prevent site administrators to uninstall/disable plugins from the web UI
To test you can deploy a new parameter in your local.inc file. For example, with the following parameter you won't be able to disable/uninstall the label or dynamic_credentials plugins: $sys_plugins_that_can_not_be_disabled_from_the_web_ui = 'label, dynamic_credentials'; This contribution also fixes the fact that it was possible for someone crafting the request to disable the plugin PluginsAdministration. Change-Id: Ib1357ad0b2d8219553e7317fdbc0d95842d7028e
Modified Files
| Name | ||||
|---|---|---|---|---|
| A | plugins/pluginsadministration/include/PluginDisablerVerifier.php | +45 | −0 | Go to diff View file |
| M | plugins/pluginsadministration/include/PluginsAdministrationActions.class.php | +17 | −6 | Go to diff View file |
| M | plugins/pluginsadministration/include/PluginsAdministrationPluginInfo.class.php | +4 | −3 | Go to diff View file |
| M | plugins/pluginsadministration/include/PluginsAdministrationViews.class.php | +15 | −4 | Go to diff View file |
| M | plugins/pluginsadministration/include/autoload.php | +3 | −2 | Go to diff View file |
| A | plugins/pluginsadministration/phpunit/.simpletest_skip | +0 | −0 | Go to diff View file |
| A | plugins/pluginsadministration/phpunit/PluginDisablerVerifierTest.php | +75 | −0 | Go to diff View file |
| A | plugins/pluginsadministration/phpunit/bootstrap.php | +21 | −0 | Go to diff View file |
| M | src/etc/local.inc.dist | +2 | −0 | Go to diff View file |
| M | tests/phpunit/phpunit.xml | +1 | −0 | Go to diff View file |