Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SecureMode and SelectBox #61

Closed
bschmalhofer opened this issue May 31, 2020 · 2 comments
Closed

SecureMode and SelectBox #61

bschmalhofer opened this issue May 31, 2020 · 2 comments
Milestone

Comments

@bschmalhofer
Copy link
Contributor

In Framework.xml there is a setting for SecureMode.

   <Setting Name="SecureMode" Required="1" Valid="1" ConfigLevel="200">
        <Description Translatable="1">Disables the web installer (http://yourhost.example.com/otobo/installer.pl), to prevent the system from being hijacked. If not enabled, the system can be reinstalled and the current basic configuration will be used to pre-populate the questions within the installer script. If enabled, it also disables the GenericAgent, PackageManager and SQL Box.</Description>
        <Navigation>Core</Navigation>
        <Value>
            <Item ValueType="Checkbox">0</Item>
        </Value>
    </Setting>

There it is stated that the SQL Box is disabled when SecureMode is enabled. However I have been able to run a SELECT in the SQL Box after installer.pl has run. I think that the documentation in Framework.xml is outdated.

@svenoe
Copy link
Contributor

svenoe commented Jun 2, 2020

I would guess so, too. Package manager and generic agents are also available with secure mode enabled.

bschmalhofer added a commit to bschmalhofer/otobo that referenced this issue Jun 5, 2020
method name is DisableSecureMode, not CacheCleanup
bschmalhofer added a commit to bschmalhofer/otobo that referenced this issue Jun 5, 2020
Correct the claim that SecureMode disables GenericAgent and the SQL Select Box.
@bschmalhofer
Copy link
Contributor Author

PR is applied

@bschmalhofer bschmalhofer added this to the OTOBO 10.0 milestone Jul 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants