Geeklog Forums

I gave someone Admin rights to everything except Root. He has User Admin permission. Since he is not root, he cannot change my permission. But he can create a new user and give him Root access and login with that username and change my permissions. I think that's really dangerous.

Any solutions? Or is it previously dealt with already? I didn't find any thread about this.

Sam

Can't check it now, but it sounds like a bug. Please submit a bug report for it.

bye, Dirk

I did some more test, since I was sleepy last night when I post the previous message.

It is the "Group Admin" right that allows someone who does not have Root access to obtain Root access. He can open his own user profile through the Users admin, and check the Root box, and become a Root user.

The funny thing is that he can also uncheck the Group Admin by himself and lock himself out of this opportunity.

I will find the place to report the bug and do it. For the time being I cannot give anyone that I don't what give Root access the Group Admin right. And all Geekers should be warned.

Sam