[Libreoffice-bugs] [Bug 136010] Cannot disable extensions installed by package manager

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=136010

Rene Engelhard <rene at debian.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |NOTABUG

--- Comment #8 from Rene Engelhard <rene at debian.org> ---
> I think you don't differentiate between disable and remove ? or you don't
> understand what I wrote ?

No, you don't understand what I wrote and security. 

I explicitely wrote

--- snip ---
One could imagine some new feature which makes "don't activate this extension
while installed", but that would be questionable imho.
--- snip ---

But then

--- snip ---
And in some cases the admin might want to force something on anyone (and be it
config changes which also could be done via extensions). Bypassing what the
admin wants is bad.
--- snip ---

remains. If a user can deactivate extensions deploying configuration by the
admin this is VERY bad. Be it Macro Security settings or whatever else
company-wide configuration.

> Btw why are you are so eager to close this report ?

Exactly because of the above and you don't get the distinction between admin
and users which is a *fundamental concept*. Users don't get to mess with
system-wide installed stuff. Period.

We are not in Windows here.

> I will explain to you the situation, suppose you have a Linux machine with 3 users (one admin and two normal users),

So 2 users.

> if admin want to disable some extensions installed by package manager, should he remove them totally ? No ! this will remove the extension also for other users !
> What the admin want is to disable temporary some extensions for only himself > and other users should still have access to extensions.

... as shown here. The admin himself has no LO use, no one should run LO as
root. So what the admin does always affects users, not only him for LO.


One always can install an extension locally for users (--shared wouldn't
probably work either since uninstalling also would require root).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200822/a0ffbea9/attachment.htm>