[Koha] Is Koha plugin system safe?

[Jonathan Druart]

Hi Michal,

It depends on the plugin :)
A plugin can do almost everything it wants, so you should only install
plugins you really trust.
And you should give the permissions to manage them to librarians you
really trust as well.

I should add that plugins are almost never reviewed (by the QA team
for instance), so they could potentially contain security issues.

Regards,
Jonathan

Le jeu. 16 avr. 2020 à 12:28, Michał Dudzik <dudzikmichal at wp.pl> a écrit :
>
> The koha plug-in system enables easy system expansion with an additional
> non-standard function.
> I have received several queries from librarians about the security of the
> plug-in system.
> Personally, I have not observed any problems, so I would like to ask if
> using the plug-in system is safe?
>
> Regards,
> Michal
>
>
>
>
> --
> Sent from: http://koha.1045719.n5.nabble.com/Koha-general-f3047918.html
> _______________________________________________
>
> Koha mailing list  http://koha-community.org
> Koha at lists.katipo.co.nz
> Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha