[PHPBB3-15928] Remove support for downloading backups

Discuss requests for comments/changes posted in the Issue Tracker for the development of phpBB. Upcoming releases are 3.2/Rhea and 3.3.
User avatar
Scanialady
Registered User
Posts: 14
Joined: Sat Sep 12, 2015 3:17 pm

Re: [PHPBB3-15928] Remove support for downloading backups

Post by Scanialady » Fri Jan 11, 2019 12:01 pm

I don't like this idea to remove support for downloading backups. And I don't like the "one founder"-idea.
Permissions to download a backup can save or compromit a board as well. However, assigning the rights incorrectly is a human problem, not one of the software. To have at least 2 founders may be the last rescue if the main admin is no longer available (sick / dead / listless / on vacation ...).

To better support the GDPR there would be a lot of other functions with more priority and more effect. All were discussed extensively a year ago.

User avatar
DavidIQ
Customisations Team Leader
Customisations Team Leader
Posts: 1793
Joined: Thu Mar 02, 2006 4:29 pm
Location: Earth
Contact:

Re: [PHPBB3-15928] Remove support for downloading backups

Post by DavidIQ » Fri Jan 11, 2019 8:27 pm

Well I guess you should ask yourself: under what circumstance would an administrator need to download a database backup from within the ACP through their browser? If it's for convenience then does that make their data safe or does it put them in the same precarious situation that many sites have been in with massive data leaks?

Situations where a forum administrator does not have access to the server are very rare so to continue putting everyone at risk for that tiny fraction of a percent of admins that might end up needing to download a backup through the browser does not seem to merit keeping the functionality.
Image

User avatar
3Di
Registered User
Posts: 740
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano (I) Frankfurt (D)
Contact:

Re: [PHPBB3-15928] Remove support for downloading backups

Post by 3Di » Sat Jan 12, 2019 5:53 am

DavidIQ wrote:
Fri Jan 11, 2019 8:27 pm
Situations where a forum administrator does not have access to the server are very rare so to continue putting everyone at risk for that tiny fraction of a percent of admins that might end up needing to download a backup through the browser does not seem to merit keeping the functionality.
Agreed.
:game_die: The new Dice Roller extension for phpBB 3.2 is out! :game_die:

Please PM me only to request paid works. Thx.
Want to compensate me for my interest? Donate
Extensions, Scripts, MOD porting, Update/Upgrades
My development's activity º PhpStorm's proud user

User avatar
3Di
Registered User
Posts: 740
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano (I) Frankfurt (D)
Contact:

Re: [PHPBB3-15928] Remove support for downloading backups

Post by 3Di » Sat Jan 12, 2019 5:58 am

Ger wrote:
Thu Jan 10, 2019 12:19 pm
3Di wrote:
Thu Jan 10, 2019 10:38 am
v3d wrote:
Thu Jan 10, 2019 10:08 am
Why not create an admin permission "can download backups" or more commonly "can use the backup functionality (create, restore, delete, download)"?
It might be an idea for phpBB 3.3/4, I don't see it as something to implement in 3.2 anyway.
Why would an extra permission need to wait for a new major version, while removal of functionality can be done in a minor upgrade?

Not that I really care, I never use that phpBB function anyway (MySQL Workbench ftw).
I have to say that in light of the reasons why functionality has been removed, I don't even think it's a good idea today to add a permit to the existing ones.
:game_die: The new Dice Roller extension for phpBB 3.2 is out! :game_die:

Please PM me only to request paid works. Thx.
Want to compensate me for my interest? Donate
Extensions, Scripts, MOD porting, Update/Upgrades
My development's activity º PhpStorm's proud user

Post Reply