Extensions New ACP Module Auth

[Blitze]

I recently came across the below topic which suggests that for extensions that create modules in UCP/MCP/ACP, the extension author needs to add something like 'auth' => 'ext_vendor/foobar' to their module info files so the modules don't show up when the extension is inactive.

https://www.phpbb.com/community/viewtop ... &t=2222606

I get the idea of why we need this but what I don't get is why we put the burden on the extension author to do this. Extension modules are created using migrations so why can't the migrator add this automatically? Is there a scenario in which it would be permissible for an extension to not include this? Because if there isn't, we can simply have the migrator add this as it creates the modules (I'm assuming, of course, that the migrator has access to the extension name (vendor/foobar) as it installs the extension, or does it not?).


What do you think?

[nickvergessen]

Extensions can add modules that still work when the extension is disabled. This would not be possible otherwise.
Also it is a one time job to fix this. The mod team will check it for submissions so when stuff is in the CDB it is working as intended

[EXreaction]

The migrator does not have access to the extension name (and the individual migrator tools--modules, config, etc--have even less than the migrator itself), which is why we had to set it up this way instead of do it automatically.