From: Bharat M. <bh...@me...> - 2006-12-28 05:35:42
|
True, we could let any multisite download/upgrade a new module. It's pretty easy for the DP code to prevent/allow this. It would mean that a multisite could break the codebase version (not sure if that scenario is particularly worse than the opposite direction. Jay Rossiter / Signe wrote: > Using the > > (GALLERY_CONFIG_DIR != dirname(dirname(__FILE__))) > > method, I don't see why multisite wouldn't be able to download new code. Just not delete. > > (Don't we have a GALLERY_BASE? I forget. Might make it simpler.. if (GALLERY_CONFIG_DIR != GALLERY_BASE)) > > I haven't looked at the permissions-check portion of DP (where it > determines if install/delete is possible) - can it tell the difference > between which action is being requested? > > Bharat Mediratta wrote: >> Ok, so then 3 looks like this: >> >> 3) Codebase can do everything we can currently do now, except for >> deleting plugins. Multisites cannot download new code. >> >> The one issue holding us back is differentiating between codebase and >> standalone. >> > |