• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Not a bug CanEditUser doesn't check if Selected User is SuperAdmin

Vincent

Well-known member
#1
The CanEditUser check on the Edit link in the Member Card for Administators doesn't check if the User they're trying to enter is a Super Administrator.

I'm not sure if it's possible to check that, since it's defined in the config.php.

Anyhow, we'll see :)
 

Kier

XenForo Developer
Staff member
#2
I'm not sure I'd classify this as a bug, as the 'Edit' link can still be used to view privileged info, even if you can't actually edit the super admin.
 

Vincent

Well-known member
#3
I'm not sure I'd classify this as a bug, as the 'Edit' link can still be used to view privileged info, even if you can't actually edit the super admin.
Not true:
After clicking the Edit link from a Super Admin Membercard as a normal Admin:
Sans titre.png
 

Mike

XenForo developer
Staff member
#4
Regardless, we show this edit link throughout the admin CP where it may not be accessible (for this reason) so I think the behavior is consistent.