Tiki and PluginR

Posted by Jean-Marc Libs 16 Jun 2014 21:14 GMT-0000 posts: 40

About the idea of a Plugin_R_stats_refresh which refreshes all R and RR plugins in the page, I am concerned about the potential for denial of service attacks:
Anyone who clicks on the button will force a lot of computations on the server. If someone does a script which simulates clicking on it, the server is likely dead.

So we would need some kind of new permission for this maybe ?