View Issue Details

IDProjectCategoryView StatusLast Update
0028165mantisbtdocumentationpublic2021-04-05 04:59
Reporterronemjay Assigned To 
PrioritynormalSeverityminorReproducibilityN/A
Status confirmedResolutionopen 
Product Version2.24.3 
Summary0028165: Block some settings from being viewed
Description

I would like to block some sub-menus from being viewed by users. For example, I'd like to block administrators from seeing the plugins page, so I can prevent unauthorized uninstallation of plugins.
Is there a way to do this? Apologies if it has been raised before

TagsNo tags attached.

Activities

atrol

atrol

2021-04-01 08:06

developer   ~0065320

You can add the following line to file config_inc.php

$g_manage_plugin_threshold = NOBODY;

Changed category to documentation as the option is not described in Admin Guide.

As told in the Admin Guide, check also config_defaults_inc.php for in depth explanations of the available options.
https://mantisbt.org/docs/master/en-US/Admin_Guide/html-desktop/#admin.install.config

ronemjay

ronemjay

2021-04-01 08:24

reporter   ~0065321

Noted, thank you very much

atrol

atrol

2021-04-01 08:35

developer   ~0065322

Enhanced the documentation in config_defaults_inc.php, see MantisBT master 1091f08d
No time for the Admin Guide at the moment.

dregad

dregad

2021-04-01 08:59

developer   ~0065323

Last edited: 2021-04-01 08:59

so I can prevent unauthorized uninstallation of plugins.

Installing a new plugin requires its source code to be stored in on your server's file system (in the mantisbt/plugins directory).

Someone having access to the plugins management page, would not be able to install anything, unless they can also write to the server's file system, in which case you probably have other, more important things to worry about than rogue plugin installations...

atrol

atrol

2021-04-01 09:28

developer   ~0065324

@dregad not sure you noticed: This is about uninstallation of plugins.
E.g. by setting $g_manage_plugin_threshold = NOBODY; you can prevent uninstallation of the Formatting plugin via UI.

dregad

dregad

2021-04-01 18:53

developer   ~0065325

Sorry, I indeed missed the un...

But in that case, it might be preferable to protect those plugins that should not be uninstalled, using the $g_plugins_force_installed config.

ronemjay

ronemjay

2021-04-05 04:59

reporter   ~0065334

That also helps out a lot. Thank you.

Related Changesets

MantisBT: master 1091f08d

2021-04-01 08:28:22

atrol

Details Diff
Enhance manage_plugin_threshold documentation

Issue 0028165
Affected Issues
0028165
mod - config_defaults_inc.php Diff File