Bug 452676

Summary: No unconditional activation of all plugins for newly paired devices
Product: [Applications] kdeconnect Reporter: Paul Krause <paul_krause_1980>
Component: commonAssignee: Albert Vaca Cintora <albertvaka>
Status: REPORTED ---    
Severity: wishlist    
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Unspecified   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Paul Krause 2022-04-16 13:52:48 UTC 
At the moment, each newly paired device has all plugins active on both paired devices.
It would be more secure, and a nice feature, if this would not be the case unconditionally.

Some extend of security is of course provided by the sandbox of flatpak, the permissions system on mobile phones. But in other cases a newly paired device can do anything on the other device (e.g. using the Run Commands plugin) that the pairing user can do.

Personally, I do not mind if there is no fine control, just a "No plugin activated by default" option. Likewise whether this is controlled by an option in the gui, for desktop devices by some configuration file, by a pop-up asking for preference at the time of pairing, or just plain hard-coded.

Many Thanks!