Changes between Version 11 and Version 12 of AdvancedTicketWorkflowPlugin


Ignore:
Timestamp:
May 8, 2008 7:22:26 PM (6 years ago)
Author:
retracile
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • AdvancedTicketWorkflowPlugin

    v11 v12  
    5151== Documentation == 
    5252 
    53 Before installing this plugin, you need to understand that the `run_external` option allows arbitrary shell scripts to be run as the webserver user.  '''Anyone who is allowed to modify the workflow configuration will be able to execute arbitrary commands as your webserver.''' 
    54  
    5553 * set_owner_to_reporter  (!TicketWorkflowOpOwnerReporter) 
    5654    Sets the owner to the ticket reporter. 
     
    8078}}} 
    8179 * run_external (!TicketWorkflowOpRunExternal) 
    82     Runs arbitrary commands as the webserver user.  ''Please give some thought to the security ramifications.'' 
     80    Runs an external script `<tracenv>/hooks/<someaction>` passing the ticket number and the username as parameters. 
    8381{{{ 
    8482    <someaction>.operations = run_external 
    85     <someaction>.run_external = echo "whatever" >> /writable/file;/opt/pwn_server 
    86     <someaction>.run_external_hint = Do something dangerous. 
     83    <someaction>.run_external = Hint to tell the user. 
    8784}}} 
    8885