Description
Currently, if a XAR application depends on a JAR extension that is not installed and if the administrator has not the programming right, she cannot install the application.
That's a shame because of plenty of "safe" applications (like the Blog) that could be installed without any risk.
That's why I propose to introduce signed extensions, that could be installed with admin right only.
Attachments
Issue Links
- is related to
-
XWIKI-9332 Improve security by only giving programming rights to scripts signed by a privileged user
- Open
- relates to
-
XWIKI-13861 Hidden and unpublished blog articles should not be displayed on the search results or AS
- Closed