search

Extendy / SmartyURL

SmartyURL is a PHP-based web application for Smart URL management, Sharing, shortening, and analytics, featuring smart redirects.
https://docs.smartyurl.extendy.net/
MIT License
12 stars 2 forks source link

Bug: superadmin can remove superadmin group from his group when edit his account #143

Closed mshannaq closed 8 months ago

mshannaq commented 8 months ago

Describe the bug superadmin can remove superadmin group from his group when edit his account and this can lock the system if there is no user with supderadmin permission.

To Reproduce Steps to reproduce the behavior:

  1. login as superadmin account
  2. list users and locate your self and try to edit your account
  3. remove the superadmin from your groups
  4. save
  5. this will remove the superadmin permissoin and lock the system until another superadmin give you the permission if there is another superadmin or the system is locked until permission granted again to your account and this is not logic.

Expected behavior disallow the superadmin to remove his self from superadmin or deny the superadmin from changing his account usergroup while edit hit account.