[TYPO3-dev] admin -> BE -> Installtool: Drop the need for a password?

[Steffen Ritter]

Michael Miousse schrieb:
> Le Tue, 23 Feb 2010 11:05:21 +0100, Marcus Krause a écrit :
> 
>> Martin Bless schrieb am 02/23/2010 10:37 AM Uhr:
>>> As BE admin I hate the effort of creating ENBABLE_INSTALL_TOOL and
>>> entering an often cryptic password.
>>>
>>> I'm wondering if there is a /conceptual/ reason why BE admins have to
>>> enter a password for the Install Tool when there is an open BE session?
>>>
>>> What do you think about it?
>> The install tool is a separate application from TYPO3 BE itself. It
>> needs to work without an existing BE session. (e.g. setting up a TYPO3
>> installation)
>>
>> Marcus.
> 
> I think what he mean is why do we have to enter the installtool password
> when we are logged in as admin be user knowing that it is completly useless 
> since we can create the ENABLE_INSTALL_TOOL file and change the install tool password 
> by using extensions like quixplorer.
> 
> Dont give me wrong,Install tool password is very important when you are not logged in as admin be user and
> you want to access it directly via the url.
since install tool is a standalone software, it does not know about 
"backend" or any installed extensions. It's the "framework-configurator" 
. Since there cannot be any depency about the software itself, it cannot 
use BE-session for login to.