[QGIS-Developer] Qgis-bot feature request

2023-11-08 Thread B. De Mezzo via QGIS-Developer

Hi,

one of our previous PRs has been labeled: 'ChangeLog' then after a 
"short" time 'ChangeLogHarvested'. We postponed the necessary 
modifications and missed the harvest.


Can you put the harvest date in future qgis-bot messages so we can plan?

Regards!


OpenPGP_signature.asc
Description: OpenPGP digital signature
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer


Re: [QGIS-Developer] Enhancing QGIS Development and Security Features Proposition

2023-11-03 Thread B. De Mezzo via QGIS-Developer

Hi Rhea,

same as Johannes "I am in no way able to officially answer but maybe I 
can give some thoughts and rhetoric questions":


* QGIS is not designed to handle such security restrictions, it is not 
its purpose


* the best way, IMHO, is to limit its network accesses by using 
dedicated security software as selinux for linux or advanced firewall 
configuration for windows


* the best to discuss these features is "to create QGIS Enhancement 
Proposals at https://github.com/qgis/QGIS-Enhancement-Proposals/issues.;


Regards.

Le 03/11/2023 à 09:35, Johannes Kröger (WhereGroup) via QGIS-Developer a 
écrit :

Hi Rhea,

I am in no way able to officially answer but maybe I can give some 
thoughts and rhetoric questions:


To me those improvements sound like good ideas. I am not sure how far 
you could lock down Python extensibility considering the existing API. 
And I am not sure if you are aware of the many ways that a QGIS 
environment might use network calls, e.g. a tool like Proj might 
download grids from the internet in some cases, GDAL might try to 
fetch schemas specified in local files, etc. Sandboxing the system 
from the outside is probably much easier and secure.


Are those 40 extensions existing extensions? Are you aware that you 
can strip out the official repository and use your own instead?


It would probably be best to create QGIS Enhancement Proposals at 
https://github.com/qgis/QGIS-Enhancement-Proposals/issues.


And it would be good to proof commitment to maintaining the new 
features in some way or enter the sustaining membership program with 
significant, recurring contributions so that other developers paid by 
the QGIS project can maintain them.


Cheers, Hannes
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer


OpenPGP_signature.asc
Description: OpenPGP digital signature
___
QGIS-Developer mailing list
QGIS-Developer@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer