View Single Post
  #9  
Old 06-24-2005, 05:58 PM
Quarterbore Quarterbore is offline
 
Join Date: Mar 2005
Location: Valley Forge PA
Posts: 538
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Thanks guys! I am still trying to figure out what this is all about and as stated above this is kind of a virtual property so I always have the keys to simply give access and later remove this person's access as long as I have superadmin rights... If I add a new Admin... can that Admin go in and lock me out?

I was curious so I went in and set myself to SuperAdmin and the created a new account (for myself) and I noticed that the SUPERADMIN can set permissions for a new Admin as follows:

Can Administer Settings Yes No :down:
Can Administer Styles Yes No :down:
Can Administer Languages Yes No :down:
Can Administer Forums Yes No :up:
Can Administer Threads Yes No :up:
Can Administer Calendars Yes No :up:
Can Administer Users Yes No :down:
Can Administer User Permissions Yes No :down:
Can Administer FAQs Yes No :up:
Can Administer Avatars / Icons / Smilies Yes No :up:
Can Administer BB Codes Yes No :up:
Can Administer CRON Yes No :down:
Can Run Maintenance Tools Yes No :down:

I have ranked these based on how bad I think the risks would be...

I would not give out FTP power or the password to the MYSQL database so I always have the real power to the kill switch if needed... I really could use the help with the forum so I am quite tempted to give it a try... I was able to look his refererences and he seems like the real deal...

Best to sleep on a decision like this... thanks for the advise however as I agree this is a strange situation to be in... Mod Access... sure... Admin :ermm:

EDIT: OOOHHH NO!

Ok, I gave my new Admin account the power to ONLY Administer Users and I see that I was able to move my SuperAdmin Account to another group (looser group)... That is not good!

I next ONLY gave access to "Can Administer User Permissions" and there I see they could change the permissions of the Admin group to be locked out and make a new group to replace the Admin Group... :surprised: Not Good!

I do like how the CP gets reduced based on access rights and power... This may not be all so bad if limited correctly... They could have access to the forums and thread tools without me being able to take contol if I had to...
Reply With Quote
 
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01162 seconds
  • Memory Usage 1,767KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD_SHOWPOST
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • reputationlevel
  • showthread
Included Files:
  • ./showpost.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showpost_start
  • bbcode_fetch_tags
  • bbcode_create
  • postbit_factory
  • showpost_post
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • showpost_complete