Ticket #878 (new enhancement)

Opened 7 years ago

Last modified 5 years ago

block system commands

Reported by: kjdon Owned by: nobody
Priority: moderate Milestone: 3.10 Release
Component: Greenstone3 Runtime Severity: enhancement
Keywords: Cc:


Currently anyone can run system commands and reload/delete collections etc. Make this more secure.

Simple solution: Make it only available when logged in as admin.

More flexible solution: Have a setting for system commands:

  • allow none
  • allow all
  • allow only admin users

Change History

Note: See TracTickets for help on using tickets.