Bug tracker

This ticket has been moved to our new tracker. Open Ticket PHPBB3-4828 now.

Standard admin can give himself more permissions (fix completed in vcs)

Bug #7642 is still present in RC1, I think

I'll explain it again:

The board admin gives a user standard admin permissions. The user (we'll give him the name "Mister X") goes to Users and groups, Administrators, members, and add himself to the group. Than Mister X can much more, because the group Administrators can much more than a standard admin!
Maybe you can make something, that with a fresh install, you don't can manange Special Groups as Standard admin?


(PS: I've tested this with a friend, who absolutely don't understand the phpBB3 permissions...)

Comments / History

Changed ticket status from "New" to "Not a bug"

Action performed by Kellanved (Former Team Member) on Jun 9th 2007, 13:26

Posted by Kellanved (Former Team Member) on Jun 9th 2007, 13:26

The admin group is "Founder manage only"; a "Standard Admin" can't add users to that group in the default setup.

Posted by Nomolas on Jun 9th 2007, 13:27

O yes, i can.

Posted by Kellanved (Former Team Member) on Jun 9th 2007, 13:43

The you removed the "founder only" status from the admin group. In a fresh install you can't.

Posted by Nomolas on Jun 9th 2007, 14:00

I don't think that, because he is absolutely a noob in the phpBB3 ACP...

Posted by Nomolas on Jun 10th 2007, 09:45

UPDATE: It's after conversion.

Changed ticket status from "Not a bug" to "Fix in progress"

Action performed by Kellanved (Former Team Member) on Jun 10th 2007, 11:24

Linked ticket with changeset: r7744

Action performed by Kellanved (Former Team Member) on Jun 10th 2007, 13:42

Changed ticket status from "Fix in progress" to "Fix completed in CVS"

Action performed by Kellanved (Former Team Member) on Jun 10th 2007, 13:43

Ticket details

Related SVN changesets