-
Bug
-
Resolution: Fixed
-
Minor
-
4.2.6, 4.3
Note: This issue was originally reported as "Setting in config.php to prevent site admin from assigning another site admin" with the following description. During the discussion, it evolved into an alternative bug fix aiming the potential usability issue.
At a large client, there are too many site admins (> 20). Currently, each site-admin can also give another user the role of site-admin. The new site-admin has access to the entire Moodle site and all users. This is a potential data breach!
I would like to see a setting defined in the config.php that only the main administrator has the right to give other users the role of site admin.