* Dmitry Samersoff <[email protected]> [2010-10-11 18:04]:
> The most important part of proposal - multiple plugins directories  
> counted explicitly in trac.ini and I guess it has minimal impact.

Yes, I agree this is a reasonable feature. I do not need it at the
moment, but once in the past I missed that, and I may like to have
this in near future.


>> Hmm, just put in in envdir/plugins?
>> Then it's not available to other environments.
> Unless someone "inherits" it ...  There are some symlink/permissions  
> tricks that solve this problem, but I would like to see an instant  
> solution rather than tricks.

Hmmm, AFAIK you can't 'inherit' that folder without a rw access
to the environment's filesystem. And if someone does have it,
you don't have to 'inherit', you could just put your own 'evil'
plugins in plugins subdirectory.

>> And what if he types: rm *?
>
> rm * is not an issue as it doesn't lead to security whole. Just some  
> extra work for backup team.

Unless you have some security policy plugins there, then it can be
security risk ;)

> Also how often you here that someone did rm * on the hosting ? Incident  
> with forgotten old or back files happens once a month and cost a fortune.

Well, I would just recommend do not doing backup files or _old files
in plugins directories. Just deploy there a working scripts (maybe
automatically from some VCS?)

>> A would say: sensible defaults.
>> If someone puts a plugin in environment, he surely wants it enabled,
>> so IMO it should be enabled by default. It's a very sensible solution.
>
> It's very sensible solution for small system where plugin developer,  
> trac admin and web qa is the same person.

Yeap. And IMO (I don't have staistics) it is a majority of trac
installations, so it's a sensible default for trac.

> But bad plugin (e.g. with incorrect implementation of  
> IAdminPanelProvider) could destroy whole project configuration

Well, it could also drop the whole db AFAIK, so I don't see what
splitting tac.ini file give trac :)


-- 
silk

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Development" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-dev?hl=en.

Reply via email to