[pp-1] [12.x] Deprecate the 'allow_authorize_operations' setting

Created on 1 May 2025, 11 days ago

Problem/Motivation

In πŸ“Œ Remove adding an extension via a URL Fixed and πŸ“Œ Remove UI and routes for the ability to update modules and themes via update.module and authorize.php Active we remove all the functionality that the allow_authorize_operations "killswitch" setting turned off. In πŸ“Œ Finish deprecating 'Update Manager' related code in Update Status Active we remove it from default.settings.php. But we don't want to start triggering errors for sites that have already opt'ed out. Let's start bothering folks about that in D12 once we're absolutely sure there's no longer any possible code path that the setting would prevent.

Steps to reproduce

Proposed resolution

Use https://www.drupal.org/about/core/policies/core-change-policies/how-to-d... β†’
Add allow_authorize_operations to $deprecatedSettings in core/lib/Drupal/Core/Site/Settings.php with '' as the replacement.

See https://git.drupalcode.org/project/drupal/-/merge_requests/11936/diffs?c...

Remaining tasks

Wait for πŸ“Œ [12.x] Remove all legacy code related to authorize.php and FileTransfer Postponed to land.

User interface changes

Introduced terminology

API changes

Data model changes

Release notes snippet

πŸ“Œ Task
Status

Postponed

Version

11.0 πŸ”₯

Component

update.module

Created by

πŸ‡ΊπŸ‡ΈUnited States dww

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024