0

So I had an issue yesterday where a module was updated on one of my sites that I wasn't ready for it to be updated on. It caused some issues, but I was eventually able to get the previous version back from my test server and it is working normally again.

My guess is that someone with administrative rights (but not User-1) was able to update the module from the web interface. Is there a way to prevent anyone from updating modules except User-1?

Improve this question

1 Answer 1

Reset to default
4

Uncheck the permissions "administer software updates" from roles, and they should no longer have access to this screen in the admin.

At the same time, it is advised to use drush or other methods of applying updates, as the admin screen is pretty not great for this.

Improve this answer
2
  • Plus there's a strong argument that the Update module itself shouldn't even be enabled on a production site
    – Clive ♦
    Mar 3, 2016 at 15:39
  • Yeah, I never use the web interface to apply the updates myself. The administrators don't have access to the server, hence why it was probably done from the web interface is my guess. And thank you, I guess I skimmed the permissions too quickly and didn't see that setting :)
    – Dan
    Mar 3, 2016 at 15:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.