- Affected version
- 2.2.13
Somehow, a user managed to upload a avatar and doesn't have 2fa enabled. I set it yesterday to force 2fa for the usergroup and turn off options such as uploading an avatar... did I make a mistake somewhere? Somehow, it seems that she was able to bypass some rules.
She is in the registered usergroup
www.vgcheat.com
![Screenshot (122).webp Screenshot (122).webp](https://xenforo.com/community/data/attachments/294/294411-5cd887a1d896dbcb2c8772876db402b9.jpg?hash=XNiHodiW28)
Below is what her specific permissions look like (I did not edit them, they turned out that way)
![Screenshot (123).webp Screenshot (123).webp](https://xenforo.com/community/data/attachments/294/294412-3e8fe1a09a836edca57de32c9e2adbcb.jpg?hash=Po_hoJqDbt)
This is what the default permissions look like for the registered group (which she is in)
![Screenshot (124).webp Screenshot (124).webp](https://xenforo.com/community/data/attachments/294/294413-c6234597b112ea66cc1f83f650dcac95.jpg?hash=xiNFl7ES6m)
She is in the registered usergroup
marcellahines
![www.vgcheat.com](/community/proxy.php?image=https%3A%2F%2Fwww.vgcheat.com%2Fdata%2Fassets%2Flogo%2Fvbulletin4_logo.png&hash=e922f05955482d6ce9e19b11dbb4223a&return_error=1)
![Screenshot (122).webp Screenshot (122).webp](https://xenforo.com/community/data/attachments/294/294411-5cd887a1d896dbcb2c8772876db402b9.jpg?hash=XNiHodiW28)
Below is what her specific permissions look like (I did not edit them, they turned out that way)
![Screenshot (123).webp Screenshot (123).webp](https://xenforo.com/community/data/attachments/294/294412-3e8fe1a09a836edca57de32c9e2adbcb.jpg?hash=Po_hoJqDbt)
This is what the default permissions look like for the registered group (which she is in)
![Screenshot (124).webp Screenshot (124).webp](https://xenforo.com/community/data/attachments/294/294413-c6234597b112ea66cc1f83f650dcac95.jpg?hash=xiNFl7ES6m)