| Author |
 Topic Search  Topic Options
|
moti 
Groupie
Joined: 07 September 2004
Status: Offline
Points: 73
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: why moderators can edit profiles ?
Posted: 03 May 2006 at 12:41am |
I think this is a security risk or maybe a bug
because I have about 15 moderators in my forum they have access to edit any profiles,
I have edited files " member_profile , register " to prevent them to edit profiles,
If you think this is not a bug so it should be selectable via admin area, so we can select " moderators have permission to edit profiles or no "
|
 |
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 May 2006 at 10:08am |
|
This is NOT a bug and has always been like this.
The reason for this is that you should only give people you really trust to run your board moderator permissions, this way they take the burden of the forum admin.
Moderators can edit certain items on users profiles (they can not edit the admin profile), so for example if a user comes along a starts spamming the forum and the forum admin isn't around one of the moderators can suspend the users account.
Although moderators can edit some users profiles, they don't have permissions to do things like deleting users, changing the users group, etc.
|
|
|
|
wistex
Mod Builder Group
Joined: 30 August 2003
Location: United States
Status: Offline
Points: 877
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 May 2006 at 11:55am |
|
You should think of Moderators as mini-Administrators. They help administer the website except they don't have access to the forum configuration and setup.
|
|
|
|
moti
Groupie
Joined: 07 September 2004
Status: Offline
Points: 73
|
Post Options
Thanks(0)
Quote Reply
Posted: 03 May 2006 at 2:05pm |
thanks borg
but I think this is better that moderators just can suspent users not editing anything
meanwhile, moderators can easily edit users profiles in Admin Group, ( not main admin ) I think this is a security risk
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 04 May 2006 at 12:50pm |
|
You should only ever have 1 forum admin, the built in admin account.
For security reasons it is recommended that you NEVER create any other admin accounts, unless you really have to.
|
|
|
|
AnaMaria
Groupie
Joined: 12 May 2005
Status: Offline
Points: 37
|
Post Options
Thanks(0)
Quote Reply
Posted: 04 May 2006 at 8:44pm |
|
Is there a way to suspend treir rights, I mean the moderators rights?
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 05 May 2006 at 10:16am |
|
Yes, by not making the person or group a moderator
|
|
|
|
AnaMaria
Groupie
Joined: 12 May 2005
Status: Offline
Points: 37
|
Post Options
Thanks(0)
Quote Reply
Posted: 05 May 2006 at 1:00pm |
hehe, your right, if you dont have moderators, you wont have to give them rights 
|
|
