Welcome to Geeklog, Anonymous Friday, April 12 2024 @ 02:20 pm EDT

Geeklog Forums

Root Access bug?


Status: offline

samstone

Forum User
Full Member
Registered: 09/29/02
Posts: 820
I gave someone Admin rights to everything except Root. He has User Admin permission. Since he is not root, he cannot change my permission. But he can create a new user and give him Root access and login with that username and change my permissions. I think that's really dangerous.

Any solutions? Or is it previously dealt with already? I didn't find any thread about this.

Sam
 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Can't check it now, but it sounds like a bug. Please submit a bug report for it.

bye, Dirk
 Quote

Status: offline

samstone

Forum User
Full Member
Registered: 09/29/02
Posts: 820
I did some more test, since I was sleepy last night when I post the previous message.

It is the "Group Admin" right that allows someone who does not have Root access to obtain Root access. He can open his own user profile through the Users admin, and check the Root box, and become a Root user.

The funny thing is that he can also uncheck the Group Admin by himself and lock himself out of this opportunity.

I will find the place to report the bug and do it. For the time being I cannot give anyone that I don't what give Root access the Group Admin right. And all Geekers should be warned.

Sam
 Quote

All times are EDT. The time is now 02:20 pm.

  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content