On 4/30/06, layik <[EMAIL PROTECTED]> wrote: > Am I missing something or Django 0.91 that I have has got a little bug > in the persmissions?! > > I have some users, one of them is a service admin but I have given > permissions to him to be able to add, change and delete users from > Django's standard user model. > > when I sign in using that service admin account, I can make myself a > super-user and in deed sign up as my as I want as super-users!!
If a user has permission to edit users, that user can change him/herself to be a superuser. I wouldn't consider this a bug, but perhaps we should document it more clearly. Adrian -- Adrian Holovaty holovaty.com | djangoproject.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users -~----------~----~----~----~------~----~------~--~---
