Форумы / Cotonti / Development / User rights

Hodges
#37913 09.09.2013 10:38

Hi,

I think there should be some built-in logic for handling non-admins that are given specific admin permissions for the user module. At the moment if this scenario exists, the user can promote himself to become an admin of everything!

I think that the user should be able to promote/demote other users but not above the user's own user level. This rule should include the user himself.

Cheer,
Hodges