[TYPO3] How to prevent adminuser to download and install extensions

[Christopher]

On 3/3/06, Kilian Hann <kilian.hann at gmx.de> wrote:
> Brian Bendtsen wrote:
> > If you host Typo3 sites, how do you prevent customers from downloading
> > and installing extensions?
>
> CHMOD / CHOWN the directory 'typo3conf/ext/' in a way that the webserver
> can only read from them and disable 'allow global install' in your
> installation script.
> This of course works only if they neither have ssh access nor access to
> the installation script.

Changing group/ownership of files will work, but how inconvenient will
it be if you need to install extensions on that site later? If the
admin has no access to the install tool, it'd be better to go with
your second suggestion and set the following in localconf.php or the
install tool--you can disallow both global AND local installs:

[EXT][allowGlobalInstall] = 0
[EXT][allowLocalInstall] = 0


-Christopher