another security note

This commit is contained in:
Uwe Steinmann 2019-08-08 09:31:58 +02:00
parent 3b060dc091
commit 19727e3e4e

View File

@ -105,6 +105,17 @@ IndexIgnore *
</ifModule>
```
Securing the configuration file
---------------------------------
The configuration can be fully controlled by any administrator of SeedDMS. This
can be crucial for those configuration options where external commands are
being configured, e.g. for the full text engine or creating preview images.
As a hoster you may not want this configuration options being set by a SeedDMS
administrator. For now you need to make the configuration file `settings.xml`
unwritable for the web server.
UPDATING FROM A PREVIOUS VERSION OR SEEDDMS
=============================================