mirror of
https://github.com/storytold/vectorcraft.git
synced 2026-11-09 11:54:03 +00:00
plugin.install of a module that lists no permissions ignored the result of removing the id's grant. When grants.json could not be updated, the formerly approved bytes could still be installed without approval. The store now gets the old module back, so the grant and the module it covers stay together. The new module stays when the old one can't be read back and when grants.json can't be read, since such a file approves nothing. Deleting the last grant now reports a failure. plugin.remove had the same fault. It now moves the settings and cache aside and removes the grant before anything is deleted. When the grant can't be removed, the folder is moved back, the command returns an error and the plug-in stays installed.