Hodges |
|
---|---|
Hi, I think there should be some built-in logic for handling non-admins that are given specific admin permissions for the user module. At the moment if this scenario exists, the user can promote himself to become an admin of everything! I think that the user should be able to promote/demote other users but not above the user's own user level. This rule should include the user himself. Cheer, |