Hi - I installed this to protect the Drupal superuser account (user #1) from being deleted by any role I have defined in my "Roles" area. It works great - but I've noticed that giving any role rights to "administer permissions" automatically gives that role rights to then "administer user protect".... Which means anyone assigned to that role can access the User Protect module, remove the protection around User 1 and then delete User 1.....

The only way I can see around this is making the superuser the only account on the site that can administer permissions.

Any ideas?

thanks!

Jason

Comments

hunmonk’s picture

hunmonk commented
Status: Active » Fixed

yes, you should only give trusted users that permission. you can also try http://drupal.org/project/roleassign to allow some users limited access to grant certain roles -- userprotect was written to be compatible with this module, hopefullly the 6.x version still is... ;)

jasonabc’s picture

jasonabc commented

awesome - will check it out - thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.