Not a bug CanEditUser doesn't check if Selected User is SuperAdmin

Vincent

Well-known member
The CanEditUser check on the Edit link in the Member Card for Administators doesn't check if the User they're trying to enter is a Super Administrator.

I'm not sure if it's possible to check that, since it's defined in the config.php.

Anyhow, we'll see :)
 
I'm not sure I'd classify this as a bug, as the 'Edit' link can still be used to view privileged info, even if you can't actually edit the super admin.
 
I'm not sure I'd classify this as a bug, as the 'Edit' link can still be used to view privileged info, even if you can't actually edit the super admin.
Not true:
After clicking the Edit link from a Super Admin Membercard as a normal Admin:
Sans titre.webp
 
Regardless, we show this edit link throughout the admin CP where it may not be accessible (for this reason) so I think the behavior is consistent.
 
Back
Top Bottom