Skip to content
This repository has been archived by the owner on Mar 13, 2024. It is now read-only.

MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true #4109

Merged
merged 3 commits into from
Nov 2, 2019

Conversation

alifarooq0
Copy link
Contributor

@alifarooq0 alifarooq0 commented Nov 1, 2019

Summary

Add RequirePluginSignature setting to plugin configuration page.

Ticket Link

Fixes https://mattermost.atlassian.net/browse/MM-19844

Screenshots

When RequirePluginSignature is true

image

When RequirePluginSignature is false

image

@alifarooq0 alifarooq0 added 1: PM Review Requires review by a product manager 2: Dev Review Requires review by a core commiter labels Nov 1, 2019
i18n/en.json Outdated
@@ -1140,6 +1140,8 @@
"admin.plugins.settings.marketplaceUrl": "Marketplace URL:",
"admin.plugins.settings.marketplaceUrlDesc": "URL of the marketplace server.",
"admin.plugins.settings.marketplaceUrlDesc.empty": " Marketplace URL is a required field.",
"admin.plugins.settings.requirePluginSignature": "Require Plugin Signature:",
"admin.plugins.settings.requirePluginSignatureDesc": "When true, uploading plugins is disabled and plugins are always verified during Mattermost server startup and initialization.",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we say that uploading is disabled then we should include how they can still install plugins through marketplace which may not be that obvious if not familiar.

Maybe something like:

"When true, plugins signatures are verified at installation and server startup. Additionally, plugins may only be installed through the Plugins Marketplace and manual uploading plugins is disabled."

0/5 on exact wording.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.
image

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left the link as a generic link for now. Will update when @justinegeffen finalizes the doc.

Copy link
Contributor

@aaronrothschild aaronrothschild left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, labeling for Docs

@aaronrothschild aaronrothschild added Docs/Needed Requires documentation and removed 1: PM Review Requires review by a product manager labels Nov 1, 2019
@marianunez marianunez added 3: QA Review Requires review by a QA tester and removed 2: Dev Review Requires review by a core commiter labels Nov 2, 2019
@hanzei hanzei requested a review from prapti November 2, 2019 15:11
@alifarooq0
Copy link
Contributor Author

@prapti FYI - merging this into the feature branch. Plan to have this tested when feature goes into master.

@alifarooq0 alifarooq0 merged commit a234c16 into plugin_signing Nov 2, 2019
@alifarooq0 alifarooq0 deleted the MM-19844 branch November 2, 2019 16:18
@prapti prapti removed their request for review November 16, 2019 01:38
@amyblais amyblais added the Changelog/Done Required changelog entry has been written label Nov 18, 2019
lieut-data pushed a commit that referenced this pull request Nov 19, 2019
* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install… (#3871)

* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install marketplace plugins

* Updated tests

* Removing ui marketplace install event

* Revert "Removing ui marketplace install event"

This reverts commit 5419ce0.

* Updating redux dependency

* MM-19844 - Disallow plugin upload when PluginSettings.RequirePl… (#4109)

* MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true

* Fixed text

* Fixed snapshot

* Fixing snapshot

* Bumping redux ver

* temp redux commit

* update snapshots re: i18n

* Bumping redux ver
lieut-data pushed a commit that referenced this pull request Nov 19, 2019
* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install… (#3871)

* MM-18797 - Switch webapp to use '/plugins/marketplace' API to install marketplace plugins

* Updated tests

* Removing ui marketplace install event

* Revert "Removing ui marketplace install event"

This reverts commit 5419ce0.

* Updating redux dependency

* MM-19844 - Disallow plugin upload when PluginSettings.RequirePl… (#4109)

* MM-19844 - Disallow plugin upload when PluginSettings.RequirePluginSignature is true

* Fixed text

* Fixed snapshot

* Fixing snapshot

* Bumping redux ver

* temp redux commit

* update snapshots re: i18n

* Bumping redux ver
@aaronrothschild
Copy link
Contributor

@ali-farooq0 Added a note to docs about this functionality.

mattermost/docs@7113ded

@aaronrothschild aaronrothschild removed the Docs/Needed Requires documentation label Dec 10, 2019
@aaronrothschild aaronrothschild removed their assignment Dec 10, 2019
@prapti prapti removed the 3: QA Review Requires review by a QA tester label Dec 12, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Changelog/Done Required changelog entry has been written
Projects
None yet
6 participants