Jump to:

21493 Posts in 5784 Topics by 2622 members

General Questions

SilverStripe Forums » General Questions » [BUG?] 2.4.6 - Avoid privilege escalation

General questions about getting started with SilverStripe that don't fit in any of the categories above.

Moderators: martimiz, Howard, Sean, Ryan M., biapar, Willr, Ingo, swaiba, simon_w

Page: 1
Go to End
Author Topic: 229 Views
  • nekranox
    Avatar
    Community Member
    31 Posts

    [BUG?] 2.4.6 - Avoid privilege escalation Link to this post

    27 February 2012 at 11:43pm

    Hey guys,

    Is this a bug or am I just being noob?

    In 2.4.7 when logging in as the default admin I am unable to assign users to the Administrators group. I checked the changelog and in 2.4.6 found the follow commit: https://github.com/silverstripe/sapphire/commit/de1f070

    By commenting out this function I was able to assign the accounts I had created to the administrator group using the default admin account.

    Is the default admin user not being properly assigned to the admin group? Thus the function is denying onChangeGroups()? Or am I just being noob?

    Robbie

  • borriej
    Avatar
    Community Member
    267 Posts

    Re: [BUG?] 2.4.6 - Avoid privilege escalation Link to this post

    28 February 2012 at 4:14am

    im having the same problem! needed to go into phpMyAdmin to set a secondary admin manually! Please fix..

    229 Views
Page: 1
Go to Top

Want to know more about the company that brought you SilverStripe? Then check out SilverStripe.com

Comments on this website? Please give feedback.