Re: [phpesp-dev] soma changes

[Franky V. L. <lie...@te...>]

On Sun, 30 Mar 2008 15:20:23 -0400
Bishop Bettini <ph...@id...> wrote:

> Or a BSD style config.d directory could be adopted, where every file  
> in said directory was read?  I suppose it really depends upon the
> goal.

Hmm ... I'm trying to keep the changes minimal, people don't like it
when things change too hard too often ...

> >> 	if version table in db exists ==> take that one
> >> 3) show a link to take db backup if wanted
> >> 4) show a link to execute the update scenario: 2.0.2==>2.0.3,
> >> 2.0.3==>2.0.4, ... for this, the update db scripts need to be
> >> parsed and the DB prefix added if needed
> >> 5) if update ok and tables contain no prefix: show link to script
> >> for prefix update, and warns it needs to be changed in the config
> >> file when executed
> >>
> >> Any comments?
> > I like the idea of allowing DB updates inside the application, we
> > just need to be darn sure not to destroy anything ;-)
> 
> Personally, web-accessible db maintenance makes me nervous.  How is  
> access controlled?  It doesn't seem like "administrator" is enough,
> as there are "survey" administrators and "db" administrators.  If I
> could control who could do it, different story; but if not, makes me
> nervous that Janet the survey admin gets click happy and does
> something ill-advised.

Well, it's completely controlable: only the superuser can do the
update. If you're able to update the files on the webserver, I think
you can be trusted to do the db updates as well, no? And a good admin
never gives out the superuser password to somebody else :)
Wether you do them via web or manually, that's exactly the same. And
there are no inputs from the user requested: because of the xml method,
the update goes completely transparant, no matter which version you
came from (the same goes for the prefix updates that are now possible).
I invite you to try it out first, before going into more details.
(I tried a 2.0.2 update: worked fine. I tried a fresh install: worked
fine).

Franky