Why not autologout user with uid=1
drupal4peter - February 5, 2009 - 11:38
| Project: | Automated Logout |
| Version: | 6.x-2.2 |
| Component: | Miscellaneous |
| Category: | feature request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
Jump to:
Description
Hi,
what is the deeper reason to not autologout the admin (uid=1), fixed in the code ?
If one must be autologout, it should'nt be the admin ? To avoid that another person may continue with admin's session.
Thank you.
#1
I can confirm this behavior being also in version 6.x-2.1. It is important to know that the super admin (uid=1) will never be logged out automatically!
#2
You always can change from autologout.module the conditions like if ($user->uid < 2 || _autologout_by_role()) { to if (_autologout_by_role()) { and if (empty($account->uid) || $account->uid == 1) { to if (empty($account->uid)) {
#3
Yes, and thanks for the suggestion - but this should be put into the official code by this module's author. I consider this problem to be a security risk. To autologout the "root" user is more important than taking care of all the other users.
#4