By Date: <-- -->
By Thread: <-- -->

[Bug 5419] non-Administrators can assign themselves and other non-Administrators to the Administrators role



Please do not reply directly to this message. All additional comments should
be made in the comments box of this bug report.

http://bugs.xaraya.com/show_bug.cgi?id=5419


marcinmilan (at) xaraya.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Group|Xaraya Security Bugs        |
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME




------- Additional Comments From marcinmilan (at) xaraya.com  2006-02-11 06:57 GMT -------
You can differentiate between privileges that allow you to change roles and
privileges that let you add/remove roles to other roles. Check the components
options (Roles and Relations) when you create a privilege that applies to the
roles module.

-- 
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
_______________________________________________
Xaraya_bugs mailing list
Xaraya_bugs (at) xaraya.com
http://xaraya.com/mailman/listinfo/xaraya_bugs