Originally Posted by PoleCat
ISPC runs as root, so it can do anything it needs to on the system.
The ISPConfig daemon, yes. But not the interface. And allowing the interface to execute scripts with root permissions or pass scripts to the daemon is a security risk as planet_fox pointed out.
A online update function will have to be implemented very carefully. But my main concern is who is willing to build and test all the additional update packages for these partial updates as this can be a fulltime job for all supported distributions and will double the time for testing new releases.