How can I prevent my client from auto-updating Craft in production?



How can I prevent my client from auto-updating Craft in production? I don't want them to run Craft updates on the production site, but the "updates" badge seems irresistible to them. I would prefer to run Craft updates in my dev environment, version control with Git, test, and then deploy at my leisure.

Alex Kendrick

Posted 2014-06-12T01:51:55.317

Reputation: 724

5My guess is that Craft's update badge was specifically engineered for irresistableness. I'm not even on the client side, and I still have to remind myself to play it cool. – Matt Stein – 2014-06-12T04:19:20.387



You can use the config/general.php file to specify whether auto-updating is allowed:

Combined with a multi-environment configuration, this can be very helpful.

Admittedly, this doesn't prevent the "Updates are available" notification from appearing... There have been some discussions about future versions of Craft possibly adding a separate config setting which will allow you to disable that notification as well.

Lindsey D

Posted 2014-06-12T01:51:55.317

Reputation: 18 570

2Stop making your answer better than mine! – Brad Bell – 2014-06-12T02:15:06.227

2Lol... You may be overqualified to handle a question like this... Save your rep for those really complicated ones. ;) – Lindsey D – 2014-06-12T02:17:13.603


Perfect. If I want to hide the updates badge completely I'll just use your excellent CP CSS Plugin, Lindsey ;)

– Alex Kendrick – 2014-06-12T02:34:06.537

Hadn't even thought of that! Great idea Alex! – Lindsey D – 2014-06-12T04:42:51.607


There is an "allowAutoUpdates" config setting that you can set to false, which will disable auto-updating for a Craft install. Manual updating will still work, though.

Brad Bell

Posted 2014-06-12T01:51:55.317

Reputation: 53 205

2It would be nice to see this option available to check off in the user/user group control panel. You could disallow it for everyone, including Site Admins, then go back to each individual user and allow them to run updates. This way you can allow clients the peace of mind of having a super admin account (which they could still go and undo what you just did above) while making it difficult for them to run updates and possible mess something up. – Stuart McCoy – 2014-06-12T17:09:54.910