[development] Hello from another developer/Want to add some features

Bèr Kessels ber at webschuur.com
Sat Jan 28 11:59:19 UTC 2006


Op zaterdag 28 januari 2006 12:15, schreef Karoly Negyesi:
> > * Disabling changes to usernames and passwords of administrative users
> > by users having administer users permission.

That would be a great one; It will solve the issue where:
 * any user with administer user perms can edit superuser (change pw)
 * then log in as superuser. 
 * p0wn3 your site. 

ATM the only way around this is to simply not give anyone admin users perms;

Looking forward to a patch,

Bèr


More information about the development mailing list