[Koha-bugs] [Bug 20415] Remove UseKohaPlugins system preference

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20415

--- Comment #22 from Julian Maurice <julian.maurice at biblibre.com> ---
(In reply to Jonathan Druart from comment #21)
> (In reply to Julian Maurice from comment #20)
> > (In reply to David Cook from comment #19)
> > > You can already retrieve that information using Perl though. What scenario
> > > do you see someone using it maliciously?
> > 
> > Templates can be used in "Tools » Notices & Slips", they can be written by
> > users.
> 
> I agree, that's definitely wrong.
> 
> Fridolin, you should pass the variable the dirty way, from C4::Auth.

Maybe we can find something better than the dirty way and the security-hole
way, like a method ArePluginsEnabled in Koha::Template::Plugin::Koha ?

-- 
You are receiving this mail because:
You are watching all bug changes.