Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#767 closed defect (fixed)

Administrators can edit keymaster account?

Reported by: chrishajer Owned by:
Priority: low Milestone: 0.9
Component: Administration Version:
Severity: minor Keywords:
Cc:

Description

From Nightgunner5:
http://bbpress.org/forums/topic/can-someone-make-a-ticket-for-me?replies=3#post-12818
http://bbpress.org/forums/topic/key-master-not-be-edited?replies=4#post-12812

"With the way bbPress is currently set up, an Administrator could, just by editing the profile of a Key Master, remove the Key Master privileges. I suggest editing Key Master profiles cannot be done by anyone but Key Masters, or the administration portion of the profile should not be shown to anyone lower than Key Master if they are editing the profile of a Key Master."

Change History (3)

  • Resolution set to fixed
  • Status changed from new to closed

(In [1154]) keymasters shouldn't be demotable by non-keymasters. Fixes #767

(In [1155]) keymasters shouldn't be demotable by non-keymasters. Fixes #767 for branches/0.8

  • Milestone set to 0.8.4
Note: See TracTickets for help on using tickets.