[Qgis-user] [EXTERN] Re: [EXTERN] Re: Restrict User's access to extensions

[Rummer, Patrick (SGD Süd)]

Thanks for your thoughts,

we had that in mind as well (blocking url's) but users could just enter new ones we don't know. Also it's possible to use .zip files. 
So the best and easiest thing for me is taking out the whole plugin menu =) 
It's like "What i don't know won't hurt me" for our users. 
And if they need a new plugin or something they will call us anyway. And retrieving the menu is easier than unblocking url's if needed.

The last one is always an option but well... users... you know? ;) 
(e.g. we're not allowed to surf the www privately but everyone does it)

Kind regards,
Patrick

-----Ursprüngliche Nachricht-----
Von: Bernhard Ströbl <nospam at stroweb.de> 
Gesendet: Donnerstag, 23. März 2023 09:22
An: Rummer, Patrick (SGD Süd) <Patrick.Rummer at sgdsued.rlp.de>; Rummer, Patrick (SGD Süd) via QGIS-User <qgis-user at lists.osgeo.org>; rdmailings at duif.net
Betreff: [EXTERN] Re: [Qgis-user] [EXTERN] Re: Restrict User's access to extensions

Hi,

if the plugins are considered a security risk (no matter by whom and no matter if this is justified or not) then probably you should block access to all urls holding plugins on the network level. Your proposed approach is "security by obscurity" IMHO.
A more bureaucratic approach would be to have the users sign something that they agree not to download any plugins if not explicitly authorized by <someperson>.

my 2 cents
Bernhard

> Rummer, Patrick (SGD Süd) via QGIS-User <qgis-user at lists.osgeo.org> hat am 23.03.2023 09:06 CET geschrieben:
> 
>  
> Hello Richard,
> 
> thank you very much for your answer. I meant plugins, not "extensions", sry. 
> 
> Also, i found a way to simply disable the whole plugin menu within the " QGISCUSTOMIZATION3.ini". 
> That's the easiest way and none of our users will find it, since it's under %appdata%.
> 
> Also, i'm not the one who wants to block the plugins ;) but unfortunately i have to.
> 
> Kind regards,
> 
> Patrick
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: Richard Duivenvoorde <rdmailings at duif.net> 
> Gesendet: Donnerstag, 23. März 2023 09:00
> An: Rummer, Patrick (SGD Süd) <Patrick.Rummer at sgdsued.rlp.de>; qgis-user at lists.osgeo.org
> Betreff: [EXTERN] Re: [Qgis-user] Restrict User's access to extensions
> 
> 
> Pff, best to use paper maps and a calculator then ;-)
> 
> But seriously: disabling selective extensions (I think you mean the python 'plugins') is hard and totally remove python makes QGIS a lot less productive/usable.
> 
> Not sure if you can remove the default qgis plugins repo (or make it unreachable for your users), but if(!) so, you could try to remove that url, and create your own repo which ONLY holds plugins you allow (but then you are responsible to periodically update them). And off course a user can always download the plugin from plugins.qgis.org as zip and install it (or even copy it from another computer).
> 
> Or do you mean other extensions?
> 
> Regards,
> 
> Richard Duivenvoorde
> 
> 
> 
> On 3/22/23 14:00, Rummer, Patrick (SGD Süd) via QGIS-User wrote:
> > Hello there,
> > 
> > i don’t know if this ist he right list, so pardon me if not.
> > 
> > I have the unpleasant task to deploy QGIS to all of our users via matrix42 which is a problem in itself.
> > 
> > Anyways, the question of our - let’s call him „CSO“ – is if we can restrict the access to extensions.
> > 
> > I know that you can disable it from within the program but anyone could simply reactivate it or use zip-files or whatever.
> > 
> > Is it possible to restrict that somehow?
> > 
> > Kind regards,
> > 
> > Patrick
> > 
> > 
> > _______________________________________________
> > QGIS-User mailing list
> > QGIS-User at lists.osgeo.org
> > List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
> > Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user
> 
> _______________________________________________
> QGIS-User mailing list
> QGIS-User at lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user