Limiting Application Vault access to clients

[sshank]

I don't want my client to be able to install apps from the application vault.

I tried entering "application pool" after selecting the client, and I see all the applications, but none of them can be checked/removed, probably because they're all considered 'free'? But can't I just turn off the ability of the client/domain to use/install any of these applications from the application pool? I thought there would be a simple check box to allow or disallow this for clients.

Thanks a lot for your help!

 

[chrisl@]

Hello,

I went through and did a test install of many of the Apps in the Vault. The ones that did not work or work well I changed them to paid so the clients would not see them. I did not want to be put into a position of supporting some open source solution that was buggy and I had little knowledge of. It is great to have the easy install but once you have it in your control panel the customers think it is your product and they want you to support it completely.

I am sure you could do the same them and just mark the whole app vault as paid. Change all the apps to paid then you can one by one add them to the clients that want them without opening them up to everyone.

-chrisl

 

[sshank]

Thanks...good idea. I am still surprised that there's no option under "permissions" where you can simply prevent the client from using these in one quick selection.

 

[sebek]

List of apps

Chris,

Do you have a list of apps that we can collaborate on here that you have disabled for security reasons, bugginess, etc...?

I have set the following to the status of commercial to eliminate the use on our servers while trying to still offer some "bonuses" to our clients:

b2evolution - old version which has a sql injection security issue. The patch is easy, but clients will not do this

Coppermine - old version
CSLH - old version and find that noone uses it anyway
gallery - old version
phpAds - old version
WebCalendar - old version/security issues
WordPress - old version

I have heard that the Plesk App vault versions are a little different than the regular open source, but not sure if that is a valid claim and don't trust this on our servers. These are the only apps I have removed from the offering.

If you could add your list here it would be greatly appreciated.

Shannon