Skip to content
This repository was archived by the owner on Feb 12, 2018. It is now read-only.
This repository was archived by the owner on Feb 12, 2018. It is now read-only.

restricting roles using "Allowed Roles" does not stop user from deleting other user from ALL roles #32

Open
Open
restricting roles using "Allowed Roles" does not stop user from deleting other user from ALL roles#32
Labels
enhancementscheduled
Milestone
02.00.00

Description

@pwegrzy
pwegrzy
opened on Mar 18, 2015

anyone who has access to the "Roles" tab in the module for any Role can remove another user from ANY role, not just the ones selected via "Allowed Roles". This includes removing them even from the "Administrator" role.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementscheduled

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions