mahara-contributors team mailing list archive

[Mahara Bot <1574941@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://reviews.mahara.org/7171
Committed: https://git.mahara.org/mahara/mahara/commit/07788736aac7ac45f47af71b8f4c641fdcbd3c80
Submitter: Robert Lyon (robertl@xxxxxxxxxxxxxxx)
Branch:    16.10_STABLE

commit 07788736aac7ac45f47af71b8f4c641fdcbd3c80
Author: Robert Lyon <robertl@xxxxxxxxxxxxxxx>
Date:   Wed Sep 7 16:14:33 2016 +1200

Bug 1574941: Adding bulk delete validation

To avoid:
1) Bulk deleting all users - by checking if you
are deleting yourself.
2) Bulk deleting all the site admins - which can happen if you are an
institutional admin and the site admin(s) are in the same institution

behatnotneeded

Change-Id: I4c33d9e54f14e688897275066d2ee128557d4465
Signed-off-by: Robert Lyon <robertl@xxxxxxxxxxxxxxx>
(cherry picked from commit 2bac8857760b9b1aaa7b98ee9d869bf83e854e9f)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1574941

Title:
  Admin should not be allowed to delete themself via admin bulk delete

Status in Mahara:
  Fix Committed

Bug description:
  Currently it is possible to go to Administration -> Users and select
  some users, including yourself, and then bulk delete them.

  The system should do at least these two checks:

  1) Make sure the users you are deleting do not include the user you are logged in as / masquerading as
  2) Make sure the users you are deleting leave at least one site admin on the site

  Otherwise you can end up with pain

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1574941/+subscriptions