[TYPO3-dev] admin -> BE -> Installtool: Drop the need for a password?

[Peter Russ]

--- Original Nachricht ---
Absender:   Steffen Kamper
Datum:       23.02.2010 11:32:
> Hi,
> 
> Steffen Gebert schrieb:
>> Am 23.02.2010, 10:37 Uhr, schrieb Martin Bless <m.bless at gmx.de>:
>>
>>> As BE admin I hate the effort of creating ENBABLE_INSTALL_TOOL and
>>> entering an often cryptic password.
>>>
>>> I'm wondering if there is a /conceptual/ reason why BE admins have to
>>> enter a password for the Install Tool when there is an open BE
>>> session?
>>>
>>> What do you think about it?
>> Bad idea
>>
>> More important would be to automatically create the 
>> ENABLE_INSTALL_TOOL file, if a logged in admin wants to access the 
>> Install Tool.
>>
> 
> bad idea - the file is for any user, not only logged in admin.
> Better to pass the check for the file if user is admin.

1) not any admin should have install access
2) but if it is an admin, he can install an extension to solve this 
"problem" :-(
3) On a production evironment install should be disabled or moved out of 
the scope of the typo3/ folder and symlinked if required (makes 2. 
impossible)



-- 
loans that change lives http://www.kiva.org

_____________________________
uon GbR
http://www.uon.li
http://www.xing.com/profile/Peter_Russ