Tracker: Bugs

8 [G2][DP] Multisites can break one another - ID: 1622876
Last Update: Comment added ( bharat )

All multisites share the same modules/ and themes/ folder in the codebase.
Each multisite can add/remove plugins via "site admin -> plugins" and this
just removes the whole plugin for other multisites without proper
uninstallation.

Requirements:
- Multisite G2
- The modules/ & themes/ folders must be writeable (e.g. usually the case
with php-cgi, when installed with the preinstaller or when the
administrator makes them writeable).

Workaround:
Lock down the codebase, don't make it writeable for multisites (filesystem
permissions).

Suggested solution:
- The codebase should be read-only and interpreted as "managed plugins".
Managed by the provider/administrator.
- Either disable DP for multisites or use a dedicated modules/ and themes/
folder for each multisite such that they don't interfere.
- Also consider the case where multisite A) is running a different version
of a plugin than multisite B). So maybe say that the code of managed
plugins can only be updated by the manager.

Reported in the forums:
http://gallery.menalto.com/node/58633

Verified by andy_st


Andy Staudacher ( andy_st ) - 2006-12-27 12:29

8

Closed

Fixed

Bharat Mediratta

None

Gallery 2

Public


Comment ( 1 )

Date: 2007-01-14 20:00
Sender: bharatSourceForge.net DonorProject Admin


Discussion here:
http://thread.gmane.org/gmane.comp.web.gallery.devel/3138

I implemented Alan's suggested solution: "Codebase instance can do
everything, a multisite instance can do everything but delete." in r15695



Attached File

No Files Currently Attached

Changes ( 4 )

Field Old Value Date By
status_id Open 2007-01-14 20:00 bharat
resolution_id None 2007-01-14 20:00 bharat
assigned_to nobody 2007-01-14 20:00 bharat
close_date - 2007-01-14 20:00 bharat