Mods can give admin rights to theirself/users

anilalan

Hi, i reconfigured all the users and add some custom user roles. But moderators can give admin right to any user (including theirself) And also in the user edits admin and mod can change user passwords i also want to disable it.

tankerkiller125

anilalan We have a PR that we plan to fix up and update for our next release that will solve these issues. For now the only solution would be to remove the User Edit permission from Moderators altogether (meaning only Admins can change user information)

anilalan

tankerkiller125 Okay, thank you so much. Is there anyting you can recommend me for making password change available only for users?

tankerkiller125

anilalan Regular users can change their own passwords using the change password button on their user settings page. That is always available to them. (Based on looking here on discuss)

anilalan

tankerkiller125 I mean i do not want moderator to have an ability to change any users password. Because in their profile > settings > New password. The authorized users can set new password for any user.

tankerkiller125

anilalan Moderators would have to do it via the user profile -> Settings cog in the upper right -> Edit, if they have the permissions.

Regular users would do it via profile -> settings -> new password. Users can ALWAYS change their own password, but changing others passwords requires the user edit permission.

anilalan

tankerkiller125 Okay thanks