🌍
English
Announcement
- [2024-12-20] Piwigo 15.3.0 : same as 15.2.0 but compatible with PHP 7
- [2024-12-19] Piwigo 15.2.0 : better user activation and many fixes
- [2024-11-11] Piwigo 15.1.0 : small fixes and what's new popup
- [2024-10-22] Piwigo 15
- [2024-09-23] Piwigo 15.0.0RC1, almost there
#1 2014-07-25 08:15:16
- Yogie
- Translation Team
- Germany
- 2012-07-24
- 74
Administrators can delete Webmasters?
Hi,
why is it possible that an Administrator can delete a higher privileged User like a Webmaster!?
To me this looks like an issue!
A webmaster should be a person for example who cares about the installation, themes, plugins, updates etc... so basically the provider of the piwigo install.
An administrator surely should be able to administrate all except deleting a higher privileged user, can't update or install any themes or plugins, but can activate deactivate and configure all given items like themes, plugins and at the end create users, delete users but he should not be able to give higher privileges to somebody and maybe not even the same permissions he has!?
Any hints? Thoughts? Ideas?
Last edited by Yogie (2014-07-25 08:15:34)
Offline
#2 2014-07-25 09:40:07
- plg
- Piwigo Team
- Nantes, France, Europe
- 2002-04-05
- 13875
Re: Administrators can delete Webmasters?
Hi Yogie,
Thank you for this bug report. I reproduce the problem: an "administrator" can delete a "webmaster" (but not the main webmaster, the user created during Piwigo install). An administrator can also create another user and give him the same status. I don't think that's what we should expect. Only webmasters should be able to give administrator status.
Offline
#3 2014-07-25 11:11:03
- plg
- Piwigo Team
- Nantes, France, Europe
- 2002-04-05
- 13875
Re: Administrators can delete Webmasters?
Offline