In relation to plugin installation and upgrade within the Moodle UI (user interface)
By default the Moodle settings allow for admins users to install new plugins and also to upgrade plugins...
1) INSTALL... /admin/tool/installaddon/index.php
This option doesn´t seem safe as a Moodle admin could go there and install the wrong version for a plugin (E.g: here).
I guess it´s better to disable this option for clients with the instructions here
When I click that button to upgrade a pluign in a staging site it works perfect...
2) UPGRADE PLUGINS ( ...admin/plugins.php):
I wonder if it´s recommended to allow this plugin upgrade for clients? (when reading this post it seems that it could also create problems)
Another question, the instructions here would disable both options 1 and 2 above, is there any way to disable plugin installation but keep allowing plugin upgrades?
Thanks for any help!