[dev] help/options links
Chuck Hagenbuch
chuck at horde.org
Tue Aug 31 06:57:26 PDT 2004
Quoting Roel Gloudemans <roel at gloudemans.info>:
> I see you moved both getServiceLink and showService to the Horde class. For
> getServiceLink this is an excellent place. I have doubts about
> showService. Its sole purpose is to parse a configuration parameter.
> If I has to search for the method, I'd go looking in Prefs. But I
> think this is just a matter of taste, because the next place I'd look
> is the Horde class.
But it's not a preference. Which is why I moved it out; it'd just pollute the
prefs api with unrelated code.
> I see that one patch didn't make it; the patch for
> services/prefs.php. The patch disallows the prefs from being set
> (next to not showing the link). Any
> particular reason? (Just curious)
Because these patches were for UI issues, not for security, and I
didn't want to
completely disallow access to prefs.php based on them, in case someone wanted
to have a direct link somewhere.
> I'm not done yet on the menus. I'm somewhat of a security freak (professional
> deformation) and don't like the mysql/php/command shell in the admin
> menu. One
> of the reasons is that I have certificate based ssh access for just me and
> password based access for the Horde users. The shells destroy what I gain by
> using certificates on SSH.
>
> I have to think of a way to turn them off (in an elegant way), with no way to
> turn them on from the Horde interface.
Sure, propose a patch. Conf options, and not letting the webserver
overwrite the
horde conf.php file, should be fine.
-chuck
--
"Regard my poor demoralized mule!" - Juan Valdez
More information about the dev
mailing list