[GH-ISSUE #110] A super admin can define himself as a domain admin #95

New issue

Closed

opened 2026-02-27 11:10:03 +03:00 by kerem · 2 comments

kerem commented

2026-02-27 11:10:03 +03:00

Owner

Originally created by @tonioo on GitHub (Dec 4, 2013).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/110

Originally assigned to: @tonioo on GitHub.

Originally created by Antoine Nguyen on 2010-11-26T16:55:07Z

A user with a specific role should not be able to change his own role!

In this case, the result is:

Logged user is disconnected,
He can't logged in anymore.

Originally created by @tonioo on GitHub (Dec 4, 2013). Original GitHub issue: https://github.com/modoboa/modoboa/issues/110 Originally assigned to: @tonioo on GitHub. **Originally created by Antoine Nguyen on 2010-11-26T16:55:07Z** A user with a specific role should not be able to change his own role! In this case, the result is: - Logged user is disconnected, - He can't logged in anymore.

kerem

2026-02-27 11:10:03 +03:00

closed this issue
added the
bug
label

kerem commented

2026-02-27 11:10:04 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Antoine Nguyen on 2010-11-26T16:59:15Z

Actually the user is still able to connect after this operation but the url contained in the address bar must be changed.

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Antoine Nguyen on 2010-11-26T16:59:15Z** Actually the user is still able to connect after this operation but the url contained in the address bar must be changed.

kerem commented

2026-02-27 11:10:04 +03:00

Author

Owner

@tonioo commented on GitHub (Dec 4, 2013):

Posted by Redmine Admin on 2010-11-27T16:50:06Z

In [adf5cd0592f63337ec7c1264361f95c7aef54bbd]:

#!CommitTicketReference repository="" revision="adf5cd0592f63337ec7c1264361f95c7aef54bbd"
fixed #96
Querysets used to populate form fields are more filtered (ie. the default admin is ignored, as the current logged in user).
see #92
More protection against errors that can happen when defining new permissions.

@tonioo commented on GitHub (Dec 4, 2013): **Posted by Redmine Admin on 2010-11-27T16:50:06Z** In [adf5cd0592f63337ec7c1264361f95c7aef54bbd]: <pre> #!CommitTicketReference repository="" revision="adf5cd0592f63337ec7c1264361f95c7aef54bbd" fixed #96 Querysets used to populate form fields are more filtered (ie. the default admin is ignored, as the current logged in user). see #92 More protection against errors that can happen when defining new permissions. </pre>