* Dmitry Samersoff <[email protected]> [2010-10-11 18:04]: > The most important part of proposal - multiple plugins directories > counted explicitly in trac.ini and I guess it has minimal impact.
Yes, I agree this is a reasonable feature. I do not need it at the moment, but once in the past I missed that, and I may like to have this in near future. >> Hmm, just put in in envdir/plugins? >> Then it's not available to other environments. > Unless someone "inherits" it ... There are some symlink/permissions > tricks that solve this problem, but I would like to see an instant > solution rather than tricks. Hmmm, AFAIK you can't 'inherit' that folder without a rw access to the environment's filesystem. And if someone does have it, you don't have to 'inherit', you could just put your own 'evil' plugins in plugins subdirectory. >> And what if he types: rm *? > > rm * is not an issue as it doesn't lead to security whole. Just some > extra work for backup team. Unless you have some security policy plugins there, then it can be security risk ;) > Also how often you here that someone did rm * on the hosting ? Incident > with forgotten old or back files happens once a month and cost a fortune. Well, I would just recommend do not doing backup files or _old files in plugins directories. Just deploy there a working scripts (maybe automatically from some VCS?) >> A would say: sensible defaults. >> If someone puts a plugin in environment, he surely wants it enabled, >> so IMO it should be enabled by default. It's a very sensible solution. > > It's very sensible solution for small system where plugin developer, > trac admin and web qa is the same person. Yeap. And IMO (I don't have staistics) it is a majority of trac installations, so it's a sensible default for trac. > But bad plugin (e.g. with incorrect implementation of > IAdminPanelProvider) could destroy whole project configuration Well, it could also drop the whole db AFAIK, so I don't see what splitting tac.ini file give trac :) -- silk -- You received this message because you are subscribed to the Google Groups "Trac Development" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/trac-dev?hl=en.
