Project

General

Profile

Bug #2281

Don't allow 'administrator' permission for internal 'admin' user to be removed

Added by Jon Fautley over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Authorization
Target version:
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

Currently, it's possible to remove the 'Administrator' permission from the internal admin user account. Doing so prevents all manner of useful things (reports, facts, build status, etc) from being updated by nodes checking in.

The 'Administrator' bit should be locked on the 'admin' account to prevent this from being disabled (I note there's already logic in place to prevent the user being deleted so hopefully this can just be a small extension to that)

Associated revisions

Revision 6a26fecd (diff)
Added by Dominic Cleal over 5 years ago

fixes #2281 - don't allow admin flag to be removed from admin account

History

#1 Updated by Dominic Cleal over 5 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Dominic Cleal
  • Priority changed from High to Normal
  • Target version set to 1.2.0

#2 Updated by Dominic Cleal over 5 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

Also available in: Atom PDF