Closed (duplicate)
Project:
Drupal core
Version:
6.0-beta4
Component:
user system
Priority:
Critical
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
7 Dec 2007 at 07:55 UTC
Updated:
7 Dec 2007 at 09:35 UTC
Testing under WAMP5 1.7.2.
Steps to reproduce:
Install Drupal.
Go to "your new site".
Click "My Account".
Click Edit tab.
Click Delete.
Click Delete on Confirmation Page.
Get kicked to the curb (access denied).
I've run it twice, and sure enough, there's no protection against User 1 deleting itself.
Comments
Comment #1
edmund.kwok commentedThis issue was discussed before in http://drupal.org/node/46149.
Marking this duplicate.