Contrib.social

Encourage CLI solution and "Securing file permissions and ownership"

Open on Drupal.org →
Created on 20 June 2024, 10 months ago

Problem/Motivation

Just saw the current Text on project page:

For this module to work from the browser, Drupal must be able to change its own code base. Not all hosting environments allow this;

I agree that it's better to have an automatic update via browser to get updates instead of no updates. But we still have the strongly recommended situation that a web application should not be able to change itself and follow the suggestions of " Securing file permissions and ownership → ". The current text sound for me like it's ok to move away from this.

Steps to reproduce

Take a look at requirements section of https://www.drupal.org/project/automatic_updates →

Proposed resolution

I think it would be better to first point out the secure way and encourage to use the "Symfony console script" and second to mention how this can module can help in a more insecure hosting situation.

Remaining tasks

Change project page and other documentation if needed.

User interface changes

-

API changes

-

Data model changes

-

📌 Task
Status

Active

Version

3.1

Component

Documentation

Created by

🇩🇪Germany c-logemann Frankfurt/M, Germany

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • Issue created by @c-logemann
  • Comment 10 months ago →
    🇩🇪Germany c-logemann Frankfurt/M, Germany
  • Comment 10 months ago →
    🇩🇪Germany c-logemann Frankfurt/M, Germany

    I work on a contrib module "signal" which will also provide a "bridge" between Browser UI and CLI to solve several similar problems/ CLI tasks. There will be a Drush command to "ask" Drupal for tasks, work on the ask an return a report which can be viewed in Browser UI. To keep things light every signal type will be an entity bundle. But I think the automatic update possibility is so important that I will help to configure this as easy as possible e.g. with additional config recipe and/or code if needed.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024