Lack of interest Administrator permissions: Separate "Delete" users from "Manage" users

CTXMedia

Formerly CyclingTribe
I make my moderators Administrators too so they can assist with user account managament, but the current "Manage users and moderators" permission allows them to delete accounts.

My suggestion is to simply remove "Delete" from that manage permission set and make it a separate, distinct and explicit permission that has to be ticked.

Cheers,
Shaun :D
 

Slavik

XenForo moderator
Staff member
For the mean time,

Open up ControllerAdmin\User.php

Change line 553 from

PHP:
    {
to

PHP:
    {    $this->assertSuperAdmin();
that way only super admins labeled in your config.php can delete users.
 
Top