Skip to:
Content

Opened 6 years ago

Closed 6 years ago

Last modified 6 years ago

#767 closed defect (fixed)

Administrators can edit keymaster account?

Reported by: chrishajer Owned by:
Milestone: 0.9 Priority: low
Severity: minor Version:
Component: Administration Keywords:
Cc:

Description

From Nightgunner5:
http://bbpress.org/forums/topic/can-someone-make-a-ticket-for-me?replies=3#post-12818
http://bbpress.org/forums/topic/key-master-not-be-edited?replies=4#post-12812

"With the way bbPress is currently set up, an Administrator could, just by editing the profile of a Key Master, remove the Key Master privileges. I suggest editing Key Master profiles cannot be done by anyone but Key Masters, or the administration portion of the profile should not be shown to anyone lower than Key Master if they are editing the profile of a Key Master."

Change History (3)

comment:1 mdawaffe6 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [1154]) keymasters shouldn't be demotable by non-keymasters. Fixes #767

comment:2 mdawaffe6 years ago

(In [1155]) keymasters shouldn't be demotable by non-keymasters. Fixes #767 for branches/0.8

comment:3 sambauers6 years ago

  • Milestone set to 0.8.4
Note: See TracTickets for help on using tickets.