Is it a bad idea to give the Admin group permissions for everything?

[DimitriT]

I see the administrator as "root" [insert "bow before me for I am root" t-shirt]. Why would it be a bad idea to give all access to the admin? I am the only user in that group.

Thanks!

 

[Paul B]

It's your choice.

Personally I don't provide hard delete permission to anyone, including me.

 

[Max Taxable]

Somebody might jack your handle. Enable two-step authentication.

 

[DimitriT]

Fair enough.

PS: thanks for moving the post. I'm still new around here.

 

[DimitriT]

Somebody might jack your handle. Enable two-step authentication.

First thing I did

 

[Max Taxable]

Wise.

 

[Max Taxable]

Back in the old days of vB the script kiddies and the brute force botnets would go after that #1 account. So I always had that account completely depowered. That's still one of my practices today, although I doubt the usefulness of it. I also didn't publicly identify the admins or moderators, you had to be logged in to see their user titles.

 

[DimitriT]

Back in the old days of vB the script kiddies and the brute force botnets would go after that #1 account. So I always had that account completely depowered. That's still one of my practices today, although I doubt the usefulness of it. I also didn't publicly identify the admins or moderators, you had to be logged in to see their user titles.

That's an excellent idea. I should have thought of that. We never give the root password to a user. We create elevated users. Thanks!

 

[beerForo]

I agree on delete. Hard delete is the same as having no recycle bin. So not allowing hard delete is like adding a feature, a recycle bin.

 

[Paul B]

Another thing which a significant number of former VB users do is assume that all administrators are moderators.

They are two completely separate roles, although one member may fulfil both.

I have members on my site who are moderators but not administrators, administrators who are not moderators, and members who are both.

 

[Max Taxable]

Yes, xenforo gives you role diversity which can be another level of security. Although I realize "permissions for everything" probably means just that. But it doesn't have to be.