authorize.php

Version 1.12 (checked in on 2010/12/29 at 04:07:52 by webchick)

Administrative script for running authorized file operations.

Using this script, the site owner (the user actually owning the files on the webserver) can authorize certain file-related operations to proceed with elevated privileges, for example to deploy and upgrade modules or themes. Users should not visit this page directly, but instead use an administrative user interface which knows how to redirect the user to this script as part of a multistep process. This script actually performs the selected operations without loading all of Drupal, to be able to more gracefully recover from errors. Access to the script is controlled by a global killswitch in settings.php ('allow_authorize_operations') and via the 'administer software updates' permission.

There are helper functions for setting up an operation to run via this system in modules/system/system.module. For more information, see: Authorized operation helper functions

Globals

NameDescription
$conf

Functions & methods

NameDescription
authorize_access_allowedDetermine if the current user is allowed to run authorize.php.
authorize_access_denied_pageRender a 403 access denied page for authorize.php

Constants

NameDescription
DRUPAL_ROOTRoot directory of Drupal installation.
MAINTENANCE_MODEGlobal flag to identify update.php and authorize.php runs, and so avoid various unwanted operations, such as hook_init() and hook_exit() invokes, css/js preprocessing and translation, and solve some theming issues. This flag is checked on several…