search

baruwaproject / baruwa2

Baruwa 2.0
http://www.baruwa.org
GNU General Public License v3.0
21 stars 9 forks source link

Feature request: Allow an external users to be promoted to 'Domain Admin' via the GUI #88

Closed rmoesbergen closed 8 years ago

rmoesbergen commented 8 years ago

Currently, the type of en externally authenticated user cannot be changed. However, sometimes we want an external user to be domain admin for their organization. We then have to delete the account, and re-create it with a 'dummy' password, to make it a domain admin. It would be nice if the account of an external user would be editable, just like it is for a local user.

akissa commented 8 years ago

This is a design decision, external accounts are not to be used as admin accounts as there is no way at the moment to enforce password strength checks on external accounts. All admin accounts are designed to be local accounts such that the security posture can be set and enforced.

rmoesbergen commented 8 years ago

Ok, makes sense. Thanks!