[Libreoffice-ux-advise] [Bug 36019] Security: Add some way to dynamically enable/ disable extension installation.

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=36019

--- Comment #10 from Muhammet Kara <muhammet.kara at pardus.org.tr> ---
(In reply to Samuel Mehrbrodt (CIB) from comment #9)
> (In reply to Muhammet Kara from comment #8)
> > Do we have something like Mozilla's "about:config" which is not accessible
> > through regular GUI? (A central config file directly accessible within cpp?)
> 
> We have the expert config in Settings->Advanced. That should be used for
> something like this. See
> https://cgit.freedesktop.org/libreoffice/core/commit/
> ?id=1a032dcfebc2702f0612c470d6b9c3e3cf4fb637 for how to add such an option.

Sweet. I guess we can add an options like AllowExtensionInstallation under
.Office.Security, or AllowInstallation under .Office.ExtensionManager

> 
> I'm not sure how exactly this should be implemented. Maybe we can just
> disable the buttons (Add, Remove, Enable, Disable) in the extension manager
> dialog if this setting is set. 
> And display a message like "Extension management has been disabled. Please
> contact your administrator for more information." or something like that.
> 
> Of course users would still be able to install via the command line using
> unopkg. I'd limit the scope here only to the GUI.

I agree with you on keeping the scope only to the GUI. If we disable the
buttons, we can add a notice somewhere on the extension manager. Or we leave
the buttons clickable, and show a message whenever the user clicks on them.

-- 
You are receiving this mail because:
You are on the CC list for the bug.