uratoh Posted December 28, 2006 Share Posted December 28, 2006 So, I was just playing with the ACP Restrictions, and I found something.When a person who has only limited access to the ACP moves another member into any Admin group, the person they moved has full ACP access without any restrictions. Surely that's just an oversight?It'd be nice if anybody the restricted user moves into the Admin group inherits their permissions, like when adding a new member directly to the group. See what I'm saying? Link to comment Share on other sites More sharing options...
Ziv Grosu Posted December 28, 2006 Share Posted December 28, 2006 When you moves into the admin group inherits thier permission they have the same functions. because you moved them to "admin root" group. Check it again in your Board. I think that's not bug.Go to your ACP and then you will see the menu ,choose an: Management ,and then you will see the first cat. ,looking for : Permission Mask and then you will see the settings of the members, If It didn't work. please explain your problem again. :] Link to comment Share on other sites More sharing options...
uratoh Posted December 28, 2006 Share Posted December 28, 2006 No, I didn't. I'm 100% positive I didn't move them into the Root group. Link to comment Share on other sites More sharing options...
Ziv Grosu Posted December 28, 2006 Share Posted December 28, 2006 please explain you problem again. (If you can do it). Link to comment Share on other sites More sharing options...
Mark Posted December 28, 2006 Share Posted December 28, 2006 Hmmm.... I suppose it would be intended, but something should be done - try reporting it as a bug.For now, just don't give restricted admins permission to edit members Link to comment Share on other sites More sharing options...
uratoh Posted December 28, 2006 Share Posted December 28, 2006 EDIT: k, I'll report it on the bug tracker. o.oAlright.As an example, let's say I'm Jim. I have a fellow Administrator, Bob, who only has access to the Management Tab in the ACP. Bob decides that he wants to go and move Jane into an Administrator group. Jane now has full access to the Admin CP, because Bob moved Jane into an Admin group. Bob still only has access to the Management Tab, because I don't want anybody but me, Jim, to have anything else. Bob can give full ACP access to anybody, while only having partial access like he's supposed to. Link to comment Share on other sites More sharing options...
Ziv Grosu Posted December 28, 2006 Share Posted December 28, 2006 Bob became to be a root administrator??? or Jane? First there was Jane with a full permission ,yea? Link to comment Share on other sites More sharing options...
Working4computers Posted December 28, 2006 Share Posted December 28, 2006 There is no mention of root administrator.Nobody can make themself root, only members of the root admin group can add to that group. (This was a bug in 2.0)A administrator who only has partial access to the ACP, (management tab for example), added another user to the administrators group. The user who was given administrators status, has full ACP power, no resistrictions. Link to comment Share on other sites More sharing options...
stobbo Posted December 29, 2006 Share Posted December 29, 2006 This should be changed in my opinion. Nothing to stop someone creating another account, then making it admin to damage the board. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.