Open zylum-admin opened 9 years ago
owner
appears to be used in place of superuser
in all cases ...
if ($data[$key][type]=='Superuser') $data[$key][type]='Owner';
... except in the url redirects
...
(2, '/manage', 'home.php', 'admin', 'Superuser'),
(3, '/manage/new', 'new_sign_ups.php', 'admin', 'Superuser'),
(16, '/manage/users', 'users.php', 'admin', 'Superuser'),
(17, '/manage/users/all', 'users.php', 'admin', 'Superuser'),
(18, '/manage/users/suspended', 'users.php', 'admin', 'Superuser'),
(19, '/manage/users/owners', 'users.php', 'admin', 'Superuser'),
(24, '/manage/emails', 'emails.php', 'admin', 'Superuser'),
(5, '/contributors', 'contributors.php', 'public', 'Owner'),
(12, '/mailing_list', 'mailing_list.php', 'public', 'Owner'),
... where users with Superuser
level get to access all the manage/
pages.
Frequently in "control/function.php" the role "sueruser" is used, when this is actually refering to group owners. Superusers should probably be sysadmins who can approve new sign-ups etc.
The roles of "owner" and "superuser" are both defined in "control/security.php" It is unclear to me how the role of owner is actually used (if at all) in the code.