-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
2.7.2, 4.1, 4.4
-
MOODLE_27_STABLE, MOODLE_401_STABLE, MOODLE_404_STABLE
Hello,
people role with manager-roles can modify roles and therefore allow:
https://docs.moodle.org/27/en/Capabilities/moodle/site:config
for manager-role (themselves) which basically makes them administrators. This needs to be changed, what is the point of manager-role if a manager himself can make it to an administrator role?
- has a non-specific relationship to
-
MDL-42502 Roles: Possible to override your permissions to give you permissions you don't have
-
- Reopened
-