starred/modoboa-modoboa

Fork 0

mirror of https://github.com/modoboa/modoboa.git synced 2026-04-26 09:26:00 +03:00

[GH-ISSUE #384] a domain administrator can delete a super admin account #367

New issue

Closed

opened 2026-02-27 11:11:25 +03:00 by kerem · 4 comments

kerem commented

2026-02-27 11:11:25 +03:00

Owner

Originally created by @tonioo on GitHub (Dec 4, 2013).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/384

Originally assigned to: @tonioo on GitHub.

Originally created by Fabrice Flore-Thébault on 2013-04-15T13:01:12Z

Given that the admin user has a mail in one of the domains, a user who has only domain administrator rights can delete the admin user.

IMHO, a user with lower privilege shouln't be able to edit or delete any account with higher privileges.

Way to reproduce:

Fresh install of Modoboa

Create a domain @domain.tld@

Add an email in this domain to Modoboa Superadmin @admin@domain.tld@

Create a Domain Administator account @tech@domain.tld@

Add to the Domain Administrator @tech@domain.tld@ the rights to manage the domain @domain.tld@

Logout

In Identities management, delete the SuperAdmin user.

You're locked out

Originally created by @tonioo on GitHub (Dec 4, 2013). Original GitHub issue: https://github.com/modoboa/modoboa/issues/384 Originally assigned to: @tonioo on GitHub. **Originally created by Fabrice Flore-Thébault on 2013-04-15T13:01:12Z** Given that the admin user has a mail in one of the domains, a user who has only domain administrator rights can delete the admin user. IMHO, a user with lower privilege shouln't be able to edit or delete any account with higher privileges. Way to reproduce: # Fresh install of Modoboa # Create a domain @domain.tld@ # Add an email in this domain to Modoboa Superadmin @admin@domain.tld@ # Create a Domain Administator account @tech@domain.tld@ # Add to the Domain Administrator @tech@domain.tld@ the rights to manage the domain @domain.tld@ # Logout # Login as the Domain Administrator user @tech@domain.tld@ # In Identities management, delete the SuperAdmin user. # You're locked out

kerem

2026-02-27 11:11:25 +03:00

closed this issue
added the
bug
label

kerem commented

2026-02-27 11:11:26 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Antoine Nguyen on 2013-04-15T17:57:07Z

Applied in changeset commit:73a2c132b638.

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Antoine Nguyen on 2013-04-15T17:57:07Z** Applied in changeset commit:73a2c132b638.

kerem commented

2026-02-27 11:11:26 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Fabrice Flore-Thébault on 2013-04-16T08:01:22Z

thanks !

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Fabrice Flore-Thébault on 2013-04-16T08:01:22Z** thanks !

kerem commented

2026-02-27 11:11:26 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Antoine Nguyen on 2013-04-16T12:21:05Z

Applied in changeset commit:465d9130d0349aeccdf144c31cc170e8803c4f21.

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Antoine Nguyen on 2013-04-16T12:21:05Z** Applied in changeset commit:465d9130d0349aeccdf144c31cc170e8803c4f21.

kerem commented

2026-02-27 11:11:26 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Fabrice Flore-Thébault on 2013-04-17T15:33:06Z

A domain admin can still delete a reseller ... I know it was not in a ticket, but generally speaking, a user should not be able to either delete nor edit a user with higher privileges than himself. What do you think?

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Fabrice Flore-Thébault on 2013-04-17T15:33:06Z** A domain admin can still delete a reseller ... I know it was not in a ticket, but generally speaking, a user should not be able to either delete nor edit a user with higher privileges than himself. What do you think?