Ticket #878 (new enhancement)

Opened 4 years ago

Last modified 3 years ago

block system commands

Reported by: kjdon Owned by: nobody
Priority: moderate Milestone: 3.09 Release
Component: Greenstone3 Runtime Severity: enhancement
Keywords: Cc:

Description

Currently anyone can run system commands and reload/delete collections etc. Make this more secure.

Simple solution: Make it only available when logged in as admin.

More flexible solution: Have a setting for system commands:

  • allow none
  • allow all
  • allow only admin users

Change History

Note: See TracTickets for help on using tickets.