-
Notifications
You must be signed in to change notification settings - Fork 2.7k
MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true #4109
Conversation
…gnature is true
i18n/en.json
Outdated
@@ -1140,6 +1140,8 @@ | |||
"admin.plugins.settings.marketplaceUrl": "Marketplace URL:", | |||
"admin.plugins.settings.marketplaceUrlDesc": "URL of the marketplace server.", | |||
"admin.plugins.settings.marketplaceUrlDesc.empty": " Marketplace URL is a required field.", | |||
"admin.plugins.settings.requirePluginSignature": "Require Plugin Signature:", | |||
"admin.plugins.settings.requirePluginSignatureDesc": "When true, uploading plugins is disabled and plugins are always verified during Mattermost server startup and initialization.", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we say that uploading is disabled then we should include how they can still install plugins through marketplace which may not be that obvious if not familiar.
Maybe something like:
"When true, plugins signatures are verified at installation and server startup. Additionally, plugins may only be installed through the Plugins Marketplace and manual uploading plugins is disabled."
0/5 on exact wording.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Left the link as a generic link for now. Will update when @justinegeffen finalizes the doc.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, labeling for Docs
@prapti FYI - merging this into the feature branch. Plan to have this tested when feature goes into |
* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install… (#3871) * MM-18797 - Switch webapp to use '/plugins/marketplace' API to install marketplace plugins * Updated tests * Removing ui marketplace install event * Revert "Removing ui marketplace install event" This reverts commit 5419ce0. * Updating redux dependency * MM-19844 - Disallow plugin upload when PluginSettings.RequirePl… (#4109) * MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true * Fixed text * Fixed snapshot * Fixing snapshot * Bumping redux ver * temp redux commit * update snapshots re: i18n * Bumping redux ver
* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install… (#3871) * MM-18797 - Switch webapp to use '/plugins/marketplace' API to install marketplace plugins * Updated tests * Removing ui marketplace install event * Revert "Removing ui marketplace install event" This reverts commit 5419ce0. * Updating redux dependency * MM-19844 - Disallow plugin upload when PluginSettings.RequirePl… (#4109) * MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true * Fixed text * Fixed snapshot * Fixing snapshot * Bumping redux ver * temp redux commit * update snapshots re: i18n * Bumping redux ver
@ali-farooq0 Added a note to docs about this functionality. |
Summary
Add
RequirePluginSignature
setting to plugin configuration page.Ticket Link
Fixes https://mattermost.atlassian.net/browse/MM-19844
Screenshots
When
RequirePluginSignature
istrue
When
RequirePluginSignature
isfalse