AUAG - Auto Update Approval Guard

Adds a secure approval layer in front of Joomla!’s auto update feature – with email-based approve/block workflow and full version history!

Auto Update Approval Guard (AUAG) is a powerful Joomla! system plugin that places a controlled approval workflow in front of Joomla’s auto update mechanism. Instead of installing new core versions silently in the background, each version must first be explicitly approved or blocked via secure email links.

With per-version tokens, flexible recipient configuration, a clear lifecycle including a locked state after successful updates, and a detailed approval history view, AUAG combines the convenience of automatic updates with the control and transparency of a manual release process.

Features

• Approval layer for auto updates: Intercepts Joomla’s onBeforeJoomlaAutoupdate event and blocks automatic core updates until the requested version is explicitly approved.
• Per-version lifecycle: Tracks each Joomla! version with timestamps for creation, notification, approval, blocking and a final locked state after successful installation.
• Locked status after update: Once a version has been successfully installed, AUAG marks it as locked and freezes its state for documentation and audit purposes.
• Secure tokens per version and site: Generates cryptographically secure, version-bound tokens that are required to approve or block an update via email links.
• Email-based approve & block actions: Sends notification mails containing one-click Approve and Block links that work without a Joomla! backend login.
• Flexible recipients: Supports Joomla! user IDs, user groups (only users with "Receive System Emails" enabled) and direct email addresses, automatically merging and deduplicating all recipients.
• Single notification per version: Sends exactly one initial approval request per version; repeated auto update attempts reuse the stored state without spamming further mails.
• Permanent blocking of versions: A blocked version is never auto-installed on this site again. No new tokens or mails are generated for that version, and the confirmation mail clearly states that only manual backend installation is possible.
• Update success mail: After an approved version has been successfully installed via auto update, AUAG sends a success notification email with the old and new Joomla! version numbers.
• Approval history in the plugin settings: A dedicated history view in the plugin configuration lists all versions and their status (pending, approved, blocked, locked) including all relevant timestamps.
• Respects Joomla! auto update setting: Only becomes active when auto updates are enabled in the Joomla! Update component (com_joomlaupdate). If auto updates are disabled, AUAG stays passive.
• Joomla! 6 native implementation: Built as a modern Joomla! 6 system plugin using services, namespaced classes and event subscribers, following the same architecture as other Pro extensions.

Installation

Install Auto Update Approval Guard with the help of the Installer component as usual. Then configure and activate the plugin in System -> Plugins -> System - Auto Update Approval Guard Pro - AUAG. Finally, ensure that the auto update feature is enabled in the Joomla! Update component (com_joomlaupdate).

Usage

Once AUAG is installed and enabled, and auto updates are active in Joomla! Update, the workflow is as follows:

1. The central Joomla! update server detects a new core version and triggers an automatic update attempt.
2. Before any files are touched, AUAG intercepts the process via onBeforeJoomlaAutoupdate and checks the internal status for this target version.
3. If the version is new, AUAG creates an entry, generates a secure token and sends an email with Approve and Block links to all configured recipients (user IDs, groups with "Receive System Emails" enabled, and/or direct email addresses).
4. Recipients click either the approval or block link. No backend login is required. AUAG validates the token and updates the status accordingly.
5. Important: Approval does not install the update immediately. The central Joomla! auto update service retries the update on its next run (typically with a delay of around 6 hours between attempts and up to 5 attempts per version).
6. When a previously approved version is successfully installed, AUAG marks it as locked, records the installation time and sends an update success email with the old and new version numbers.
7. If a version is blocked, all future auto update attempts for that version are stopped. The version can only be installed manually via the Joomla! backend.

Changelog

Latest release

Version 6.0.0.0-PRO - 2025-11-30

• + Initial release of Auto Update Approval Guard Pro for Joomla! 6.x with full approve/block workflow in front of the auto update feature.
• + The plugin "Behaviour - Backward Compatibility 6" is not required. The extension only uses supported classes in Joomla! 6.
• + Added support for flexible recipients (user IDs, user groups with "Receive System Emails" enabled and direct email addresses) with automatic deduplication.
• + Implemented per-version lifecycle with locked status after successful updates, including update success emails and approval history view in the plugin settings.

Download

Overview of all downloads of the extension: AUAG - Auto Update Approval Guard Downloads