• Registered: 2004-06-26
  • Posts: 47

Topic: Security: Moderators can rename users

Hi,

Is it intentional, that Moderators can rename users, including Admins?

I found it very funny, when I granted Moderator rights to a guy and the first he did, was renaming my account.

Very funny.

(Okay, I trust the guy, so this wasn't a real problem, but I don't think, this is good behaviour.)


    Elrond

Elrond's Website

2 Reply by Paul

  • Paul
  • Senior Member
  • Offline
  • From: Wales, UK.
  • Registered: 2003-08-13
  • Posts: 3,089

Re: Security: Moderators can rename users

You learn something new everyday. What would you prefer, Bilbo or Frodo big_smile

  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Security: Moderators can rename users

haha

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

  • Registered: 2004-06-26
  • Posts: 47

Re: Security: Moderators can rename users

So is this gonna be fixed?

Elrond's Website

  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Security: Moderators can rename users

There's a reason moderators have rather large rights in PunBB. The reason is that after being a moderator in a very large vBulletin forum, I grew tired of not being able to do anything other than moderating text. Every single time a signature needed editing, a username needed changing or an avatar needed to be removed, I had to consult an administrator.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

  • From: USA
  • Registered: 2003-10-04
  • Posts: 39

Re: Security: Moderators can rename users

I agree with Rickard, I don't like the strictness of vB's moderator group either. However I don't think PunBB mods should be able to edit the admin accounts...

  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Security: Moderators can rename users

I'll review the rights for 1.2.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

  • From: york, pa
  • Registered: 2004-07-12
  • Posts: 19

Re: Security: Moderators can rename users

is there a way to modify it so mods can't change other's profiles?

HoursAfter

succubiss's Website

  • From: Islamabad
  • Registered: 2004-07-14
  • Posts: 19

Re: Security: Moderators can rename users

ooooooooh !

its amazing.




ALI
Mr. IT
AliSoft.Net
Contact # 92-0300-5239065
Email: ali@alisoft.net
http://www.alisoft.net

Mr. IT
0092-300-5239065
AliSoft .Net
http://www.alisoft.net

alisoft's Website

  • From: -8 GMT
  • Registered: 2004-05-04
  • Posts: 1,396

Re: Security: Moderators can rename users

i would suggest just letting them edit regular members accounts and not admin's accounts. kinda like the way snitz has it set, admins can't edit admin's accounts but can edit mods and below.

~James
FluxBB - Less is more
  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Security: Moderators can rename users

Dr.Jeckyl wrote:

kinda like the way snitz has it set, admins can't edit admin's accounts but can edit mods and below.

Admins can't edit admins? That can't be right.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website

12 Reply by Falconey (edited by Falconey 2004-07-22 20:37)

  • From: Netherlands
  • Registered: 2004-03-06
  • Posts: 77

Re: Security: Moderators can rename users

I've had the same problem a while ago.

  • From: -8 GMT
  • Registered: 2004-05-04
  • Posts: 1,396

Re: Security: Moderators can rename users

Rickard wrote:
Dr.Jeckyl wrote:

kinda like the way snitz has it set, admins can't edit admin's accounts but can edit mods and below.

Admins can't edit admins? That can't be right.


no but the main admin can so it equals it out i guess. never really needed to edit an admin myself so i don't miss it.

~James
FluxBB - Less is more
  • From: 127.0.0.1
  • Registered: 2001-11-02
  • Posts: 9,167

Re: Security: Moderators can rename users

I just think an administrator should be able to administrate, regardless if he's the "main admin" or not.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Rickard's Website