In Joomla 3, we allowed the FTP Credentials to be optionally saved to Joomla Global Configuration - and when they were needed (Joomla update, Extension install) they were prompted to be entered.
In Joomla 4, the CMS has more features that require - by default - access to write/delete/rename to the file system. If we continue to allow FTP Credentials to be OPTIONALLY SAVED to Joomla Global Configuration then the following features cannot work if the FTP Credentials are not present in the Global Configuration and a solution needs to be found to prompt for the credentials at the point of need (OR we change Joomla 4 to MANDATORY save the FTP Credentials into Joomla Global Config, if on a read only filesystem)
Obviously some of these tasks CANNOT prompt for credentials "at the point of need" and therefore the only logical conclusion is to (Option 1) make storing the FTP Credentials MANDATORY on a read only file system - or else the aim to make Joomla work perfectly on a read only file system cannot be achieved - and we would need to (Option 2) fall back to big error messages, thus defeating the whole point of the FTP Layer being a thing.
The following Joomla 4 features need testing in FTP Mode, with NO SAVED FTP CREDENTIALS in Joomla Global Configuration, to see how they work, what errors they generate, if they prompt for FTP credentials, and if they are actually useable when he file system is read only and only accessible by FTP.
You can replicate the full list below by setting your file system to be READ ONLY. In Docker using docker-compose.yml you can append :ro
to your folder mounts to achieve this.
This is also an attempt to record all the areas of Joomla 4 that require file write access.
unlink
in AKFactoryunlink
and write on a pidFile** Warning: This list was compiled before coffee, it is possible its a very incomplete list! **
Labels |
Added:
?
|
Following the projects decision to remove the FTP Layer from Joomla 4 - this can now be closed.
Status | New | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-04-30 10:35:54 |
Closed_By | ⇒ | PhilETaylor |
If the decision is still keep FTP layer, then +1 for make storing the FTP Credentials MANDATORY from global configurable and remove options to enter credentials on all other places. When FTP is enabled in global configuration, we will validate and make sure the the entered Credentials is valid before saving it to configuration.php. However I do hope that we will remove the FTP layer to save us from having to do this maintenance works.