Description

Add NoPluginManagement and NoAccessManagement configuration options per #79

Boiled down: Limit the risk of potential unauthorized management of plugins and RBAC by configuring plugins and access ahead of time, and adding these configurations to prevent changes to plugins / RBAC via PoshBot.

Related Issue

79

Motivation and Context

Reduce risk. See issue and description

How Has This Been Tested?

Screenshots (if appropriate):

Types of changes

[ ] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

[ ] My code follows the code style of this project.
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[ ] I have read the CONTRIBUTING document.
[ ] I have added tests to cover my changes.
[ ] All new and existing tests passed.

RamblingCookieMonster commented 5 years ago

Starting to work on this, if it makes sense. At the moment I've simply added the config pieces - next step is actually locking down based on someone using these in their config

devblackops commented 5 years ago

Sounds good @RamblingCookieMonster. Thanks!

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

poshbotio / PoshBot

WIP: Add NoPluginManagement, NoAccessManagement config options #140