Skip to content
This repository has been archived by the owner on Feb 12, 2018. It is now read-only.

restricting roles using "Allowed Roles" does not stop user from deleting other user from ALL roles #32

Open
pwegrzy opened this issue Mar 18, 2015 · 0 comments
Open

restricting roles using "Allowed Roles" does not stop user from deleting other user from ALL roles #32

pwegrzy opened this issue Mar 18, 2015 · 0 comments
Labels
enhancement scheduled
Milestone
02.00.00

Comments

@pwegrzy
Copy link

pwegrzy commented Mar 18, 2015

anyone who has access to the "Roles" tab in the module for any Role can remove another user from ANY role, not just the ones selected via "Allowed Roles". This includes removing them even from the "Administrator" role.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement scheduled
Projects
None yet
Milestone
02.00.00
Development

No branches or pull requests
2 participants
@pwegrzy @peppertree