Administrators can login as SuperAdmin

jjjj12212

Hi Everyone,

this is very scary, If I had a Administrator that manage users, he can login as to ANY user, even our Super Admin when he isn't supposed to.

We need the Admin to use the manage users so he can create EPESI logins and make modifications, if he has to, he can login as the users that is Not a Administator and definity not a Super Admin.

can you please look into this, this is very dangerous.

ajb

Thanks for your input! You're right and I will handle this now.

Regards,
Adam

ajb

I've fixed this. Here is patch for latest release - rev 10136.

Please replace your file modules/CRM/Contacts/Contacts_0.php with this from attached archive.
Or if you have done any changes in this file, then replace function user_actions with this from attached file.

Now only superadmin can login as anybody, and admin can login as any user that is not admin.

Regards,
Adam

jjjj12212

Thanks Adam,

works great.

jjjj12212

Epesi ENS | Epesi Academy | epesi.cloud PaaS | GitHub

Help Me! | Download from SourceForge