MantisBT: master a3f9d033

Diff Back to Repository
Author Committer Branch Timestamp Parent
vboctor vboctor master 2015-12-11 16:37 master 27bfe82a
Affected Issues  0020381: Administrator can disable their own account
 0020382: user_is_administrator() should not return true for disabled admins
Changeset

Disallow deleting or disabling last admin

  • When checking for remaining admins, exclude disabled ones.
  • Don't worry about changes to already disabled users.
  • Complain when disabling last administrator, not just reducing their
    access level.

Fixes 0020381
Fixes 0020382
mod - core/user_api.php Diff File
mod - manage_user_delete.php Diff File
mod - manage_user_update.php Diff File