Changes between Version 11 and Version 12 of AdvancedTicketWorkflowPlugin

Timestamp:

May 8, 2008, 5:22:26 PM (16 years ago)

Author:

Eli Carter

Comment:

--

AdvancedTicketWorkflowPlugin

@@ -51 +51 @@
 == Documentation ==
 
-Before installing this plugin, you need to understand that the `run_external` option allows arbitrary shell scripts to be run as the webserver user.  '''Anyone who is allowed to modify the workflow configuration will be able to execute arbitrary commands as your webserver.'''
-
  * set_owner_to_reporter  (!TicketWorkflowOpOwnerReporter)
     Sets the owner to the ticket reporter.
@@ -80 +78 @@
 }}}
  * run_external (!TicketWorkflowOpRunExternal)
-    Runs arbitrary commands as the webserver user.  ''Please give some thought to the security ramifications.''
+    Runs an external script `<tracenv>/hooks/<someaction>` passing the ticket number and the username as parameters.
 {{{
     <someaction>.operations = run_external
-    <someaction>.run_external = echo "whatever" >> /writable/file;/opt/pwn_server
-    <someaction>.run_external_hint = Do something dangerous.
+    <someaction>.run_external = Hint to tell the user.
 }}}