Uploaded image for project: 'ZZZ: PUBLIC - Old Liferay Portal (Use Liferay Portal Standard Edition)'
  1. ZZZ: PUBLIC - Old Liferay Portal (Use Liferay Portal Standard Edition)
  2. LEP-3610

Allow differentiation of trusted vs untrusted plugin repositories

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 4.3.1
    • Fix Version/s: 4.3.2, 4.4.0
    • Component/s: None
    • Labels:
      None

      Description

      Currently the plugin manager allows the portal administrator to set up a list of plugins to be shown while browsing for new or updated packages. This improvement breaks up that list in two, one that contains the trusted repositories and another one that contains repositories that we may not trust completely.

      The reason why this is important is because we may want to have repositories such as the Liferay Community repository where anyone can upload their own plugins, but we want the system to tell us that those plugins may not be secure so we should not install them in production systems if we haven't tested them first.

      On the other hand, there are some other repositories, were all the plugins have been tested by someone we trust and we know that we can install them safely.

        Attachments

          Activity

            People

            • Assignee:
              jorge.ferrer Jorge Ferrer
              Reporter:
              jorge.ferrer Jorge Ferrer
              Participants of an Issue:
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Packages

                Version Package
                4.3.2
                4.4.0