Skip to content

Config setting config_is_read_only should prevent Nextcloud from writing to config.php #29901

@mejo-

Description

@mejo-

How to use GitHub

  • Please use the 👍 reaction to show that you are affected by the same issue.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Description

The config setting config_is_read_only currently only prevents Nextcloud from checking for writable config in server health checks.

That's also how the setting is described at https://github.com/nextcloud/documentation/blob/6efc785734a23786bff4c6340a03fa2acbf12f42/admin_manual/configuration_server/config_sample_php_parameters.rst#nextcloud-verifications.

Still, users/admins expect the setting to prevent Nextcloud from writing to config.php. That would be helpful, e.g. to prevent admin users from accidently changing server configuration.

Steps to reproduce

  1. Set 'config_is_read_only' => true in config.php
  2. Make changes to Nextcloud config via admin interface or occ
  3. Nextcloud writes to config.php

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions