Re: [Tiki-devel] Admin password is required to modify a user group but not to delete it

Marc Laporte <[email protected]>
Newsgroups gmane.comp.cms.tiki.devel
Message-ID <[email protected]>
If you are worried about priviledge escalation: yes.


On Thu, 2 Sep 2021 10:02:06 +0300 Tiki developers [email protected] said

> Hello,
> 
> On Tiki 23 at tiki-adminusers.php an admin password is required to modify a
> user group (add or remove from a group or X near the group on the user row)
> but it is not required to delete it.
> 
> Does that make sense ?
> 
> Bernard
> 
> _______________________________________________
> TikiWiki-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.