• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Lack of interest Administrator permissions: Separate "Delete" users from "Manage" users

CTXMedia

Formerly CyclingTribe
#1
I make my moderators Administrators too so they can assist with user account managament, but the current "Manage users and moderators" permission allows them to delete accounts.

My suggestion is to simply remove "Delete" from that manage permission set and make it a separate, distinct and explicit permission that has to be ticked.

Cheers,
Shaun :D
 

Slavik

XenForo moderator
Staff member
#2
For the mean time,

Open up ControllerAdmin\User.php

Change line 553 from

PHP:
    {
to

PHP:
    {    $this->assertSuperAdmin();
that way only super admins labeled in your config.php can delete users.