I have added a line for user X in "Protected users" and checked all boxes...
yet user A (with user admin privileges) can change any attribute of user X.
- tried to protect by-role, to no effect
- tried to disable module "roleassign", to no effect.
Any suggestion for tracking the problem? Thank you....

MySQL database 5.0.27
PHP 5.1.6

user protect table reads:
uid up_name up_mail up_pass up_status up_roles up_delete up_edit up_type
0 0 0 0 0 0 1 1 user
1 1 1 1 1 1 1 1 user
1 1 1 1 1 1 1 1 admin
96 1 1 1 1 1 1 1 user
101 1 1 1 1 1 1 1 user

Comments

hunmonk’s picture

hunmonk commented

you need to check the 'Administrator bypass' settings for the module-- both in the 'Administrator bypass' tab, and the 'Administrator bypass defaults' section of the 'Protection defaults' tab.

The default install of the module starts with settings that create the same access for user administrators that are present in core -- you need to adjust from there.

Please close this issue if your quesiton was fully answered.

Thanks.

skizzo’s picture

skizzo commented
Status: Active » Closed (fixed)

tried as per your suggestion, but still couldn't make it to work,
I then deinstalled (dropping userprotect table) and reinstalled.
It now runs without a glitch. Thank you for providing this fine module.