New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to disable plugin upload #11329

Closed
tsteur opened this Issue Feb 8, 2017 · 1 comment

Comments

Projects
None yet
3 participants
@tsteur
Member

tsteur commented Feb 8, 2017

It could be good to have an option to disable plugin upload, maybe it could be even disabled by default (to be decided). Most users likely will never need it so good to make UI simpler etc. We would also need to update some FAQs.

It can be already disabled via enable_plugins_admin but it would be great to have separate option for it as often users still want to use plugins admin but not the upload.

FYI: Only logged in super users can upload plugins, nothing will change there.

@mattab mattab added the c: Security label Feb 21, 2017

@mattab mattab added this to the 3.0.3 milestone Feb 21, 2017

@mattab

This comment has been minimized.

Member

mattab commented Feb 21, 2017

It could be good to have an option to disable plugin upload, maybe it could be even disabled by default (to be decided).

Will be good to decide on this soon. Administrators of a Piwik server would likely not expect Super Users to be able to execute code on servers. I think it would make a lot of sense to prevent RCE (remote code execution) by default for Super users, as it would be consistent with our high security standards and overall practises.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment