Differences

This shows you the differences between two versions of the page.

--- mantisbt:addson_requirements [2007/10/14 08:05] – Hacking Mantis with a plugin deboutv
+++ mantisbt:addson_requirements [2008/10/29 04:25] (current) – external edit 127.0.0.1
@@ Line 205: / Line 205: @@
   * Detail the parameters sent to each of the events.
   * How are the plug-ins going to be distributed.
@@ Line 231: / Line 234: @@
 </code>
    * (deboutv) Hacking Mantis with a plugin. We need to think about the security of the Mantis application and its data. Allowing plugins is dangerous because of the content of the plugin (it could pretend to be a BBCode interpreter but in reality it could be a BBCode interpreter and a spy). With a plugin (ie: code of third parties), you can read/write the SQL database, grant priviledges to the users...
+   * (DGtlRift) There should also be a description of how plugins themselves should generate events.  This would allow additional optional functionality //between// plugins.  EI: plugin ''doesSomething'' generates event ''pe_doesSomething_special'' so that plugin ''somethingElse'' which doesn't require plugin ''doesSomething'', can optionally do something additional if that plugin is installed.
+   * (DGtlRift) Re: Distribution.
+      * The most simple way is to just have a list of tar.gz compressed archives of each plugin.  The admin would have to download them and uncompress them into the plugins directory. After that, they would be available for activation from with Admin for Managing plugins.
+      * The next option would be to offer the ability to install via the admin interface, where Mantis would check against a web list of available plugins and download (to the server) and install the plugin (requiring Mantis to have write privileges) to the plugins directory.  There are some serious security issues involved with this method, but it gives one unified interface for the admin.
+      * Another option is to have all the plgins in RPM form - which would automate installation for the sysadmin.
+   * (DGtlRift) Should the plugins be globally "turned on" by the Mantis Admin or should each project have the ability to enable/disable installed plugins?
 ==== First implementation ====