mahara-contributors team mailing list archive

[Kristina Hoeppner <868591@xxxxxxxxxxxxxxxxxx>]

Hello Mario,

We do have something like what is called "super admin" in Mahara.

Site admin = super user / super admin
Institution admin = normal admin

The institution admin can only administer user accounts and certain
aspects of the institution, but not delete plugins etc.

That may be something that you want to look into.

Cheers
Kristina

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/868591

Title:
  Creating a Super Administrator User

Status in Mahara ePortfolio:
  Triaged

Bug description:
  Hi,

  One of the issues I have seen when creating multiple admins in
  platforms from Joomla to Wordpress is administrative lockouts caused
  by administrative errors( or administrative lockouts.) Of course, we
  learn to use the administrator account for installation only, and then
  create another admin user. Here is the problem with Mahara:

  Once an admin is created...there's no root admin!

  Each admin has the same rights and privileges. This can lead to an
  admin hijacking the entire platform!

  I was able to do this to myself in testing to see if it can be done.

  Please examine administrative rights and permissions schema's similar
  to Drupal or Tikiwiki.

  Thank you!

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/868591/+subscriptions