[Tiki-devel] Isn't it time to consider change "admin" like/to "root" ?
Bsfez Tiki via TikiWiki-devel <[email protected]>
| Newsgroups | gmane.comp.cms.tiki.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, Related to Risky preferences and the complexity we added with this as the problem could have been solved differently… https://doc.tiki.org/System-Configuration https://doc.tiki.org/Risky-Preferences When you are dealing with server stuff you have a "root" user that can do anything but you should never use it. (only using his privileges in some cases - sudo or else) We have a kind of Tiki root and it is "admin". He has all permissions and privileges and his behaviour is really different than a "normal" user. We can understand why we should not use it on day to day, however having or setting a "Super user" is not an easy task (1 click) and it is possible that this super user cannot perform as intended. (admin being so special) Shouldn’t we had some kind of mechanism to "reproduce" the IT Admin root/sudo behaviour ? Can’t we have a "use as super-user" switch ? Also related, we added lately an extra security on the user group assignment action panel. To change the user group of a user you need to give the admin password. (I tried with a user from the "Admins" group and it didn't accept to work) But then it also means admin is necessary to perform simple user management action because of that. (a "super-user" you will set can’t ) So here too, having a "Super-user" not being "admin" can help to give some degres of freedom without endangering the Tiki. (admin/root is immutable. period) Any thoughts ? Bernard _______________________________________________ TikiWiki-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel