This project is not covered by Drupal’s security advisory policy.
Overview
This module creates a 'superuser' role, and grants all permissions to that role. It also defines a new permission, 'administer software updates', which allows any user with the superuser role to run update.php without having to alter the $access_check (D5) or $update_free_access (D6) variables.
This module requires the Permissions API module.
Rationale
This module also disables the user 1 account. The security benefit is that this greatly reduces the attack surface for privilege escalation attacks on the user 1 account.
Maintainer
Developed and maintained by Erich Beyrent.
Status
- Drupal 5
- Drupal 6
- Drupal 7
- This functionality is native to Drupal 7, and there are no plans to port this module to that version.
Project information
- Project categories: Security
- Created by ebeyrent on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
