<br><br><div><span class="gmail_quote">On 11/22/06, <b class="gmail_sendername">Darren Oh</b> <<a href="mailto:darrenoh@sidepotsinternational.com">darrenoh@sidepotsinternational.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Nov 22, 2006, at 5:04 PM, Darrel O'Pry wrote:<br><br>> write perms to modules directory from drupal as web server user is<br>> really hard for me to swallow....<br>><br>> any package managers like script should be run from the command
<br>> line as<br>> a privileged user. should do it's set job and be bullet proof.<br><br>Let's not forget that very few users use the command line to work<br>with Drupal. Let's also not make unnecessary assumptions about how an
<br>automated module install or upgrade would work. The security issues<br>will be worked out if people share more ideas for how it can be done<br>than for how it can't be done.</blockquote><div><br>It's likely that the best path is command line tools first -- "the market" can build whatever GUI tools are desired on top of it. At some point, some of those may make it to Drupal directly, but taking the responsibility for remote upgrades is not something I would not necessarily want to expose the community to.
<br><br>Lots of people are still thinking about individual websites. Think Fantastico and other host scripts that can drive command line hooks into Drupal as privileged users.<br><br>Other options -- like pointing your website at different repositories (supported by Derek's outlined framework) -- are also taken into consideration.
<br></div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Oswald was asking to collaborate. The negative reactions give the<br>impression that some people would rather work on their own. Not very
<br>open source. Am I missing some history here?<br></blockquote></div><br>No, you're not....you're missing frustration with a core (in both senses of the word) group of people who have played nice and developed stuff directly for the core of Drupal, undergoing excruciating levels of issue threads to have all their work torn apart and improved upon. And then someone drops in with an alternate system.
<br><br>What would have been nice: Review the existing threads, post new issues pointing to sandbox / module code, and integrate. That can still happen....there is likely some good code to be integrated.<br><br>Secondly, Oswald didn't cover much in the nature of security. That's what I put my 2¢ in on....security, security, security.
<br clear="all"><br>-- <br>Boris Mann<br>Vancouver 778-896-2747<br>San Francisco 415-367-3595<br>Skype borismann<br><a href="http://www.bryght.com">http://www.bryght.com</a>