The issue is that when you remove users from the sudoers list, they are simply "stuck" with whatever roles they currently have; if they are sudoing at that moment, then they will have the administrative privileges; if not, they won't. I've added a message to check the accounts' roles, but this is a bad UI. I'm currently leaning toward forcing the removal of one user at a time through a separate form with the user's roles listed thereon.

CommentFileSizeAuthor
#1 removing-roles-options-820028-1.patch6.94 KBdnotes

Comments

dnotes’s picture

dnotes commented
Status: Active » Fixed
StatusFileSize
new removing-roles-options-820028-1.patch6.94 KB

This should be fixed in the dev version. Instead of forcing removal of one user at a time, I've added a confirmation step for any removed sudo roles or users, asking which roles should be permanently removed from the user's account, and which should be permanently added. By "permanently" is implied only that those roles will no longer toggle on and off when the user enters or exits sudo mode.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.