Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Why moderators can delete administrators?

battersbatters New
edited September 2011 in Vanilla 2.0 - 2.8
how to fix


  • LincLinc Detroit Admin
    Are you asking why they can delete the administrator user? If so, it's because you've given them permission to delete users. Vanilla does not have special protection for admins.
  • battersbatters New
    edited September 2011
    @Lincoln its mean any moderator can delete the admin (site owner)?
    dangerous permission
  • I think what @Lincoln is saying is that permission settings are entirely dependent on how the forum is configured. If you give moderators permission to delete users, they'll be able to delete all users.

    If you want to keep moderators from deleting administrators, remove their ability to delete users. That's my guess, anyway. :)
  • battersbatters New
    edited September 2011
    @andymci thats right, but who will be delete the army of bots and spamers?
    i think is a firstable duty of moderator
  • LincLinc Detroit Admin
    I don't know of a plan to "protect" admin accounts. My advice for now is to not give that ability to anyone you don't fully trust, and keep good backups.
Sign In or Register to comment.