gayle / two_tents

[If you start working on an issue, please assign it to yourself so others know that issue is in progress.] - [If you finish an issue, please tag it Fixed so that user acceptance testing can be performed. The issue will be closed by the tester.]
14 stars 6 forks source link

Regular users can create admin users with no way to un-admin someone #140

Closed kennydrobnack closed 13 years ago

kennydrobnack commented 13 years ago

When you login as a regular user, you can create admin users. This shouldn't be allowed. Regular users shouldn't see the option to make a user an admin user.

There's also no way to remove admin rights from a user as far as I can tell.

kennydrobnack commented 13 years ago

See also issue #28 Discussion item is should we be able to add & remove any role from a user or just the admin role?