Admin User

  • Hi, I noticed a thing that in my opinion work in wrong way.
    When I install wordpress and create new user, that user is the super-administrator.
    If a create new users, and I give them the administrator role, they are able to change the super-administrator settings, like password or other, but that user has to be untouchable ny other users… if no everyone I give the administrator role, can change his settings and take complete control of the blog…
    It’s possible to fix this?
    Thanks a lot.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    You’re doing something wrong…

    When you activate Multisite, the first Admin account (i.e yours) becomes a Super Admin.

    When you add new users, you are making them admins of each SITE. If you’re making them super admins, then you’re doing it wrong.

    Thread Starter belfresc

    (@belfresc)

    I don’t use multisite version…
    I am speaking of the single site mode.
    In other web applications that I use, the first account is the “super-admin”
    If I add a user and I give it the admin role, he can’t change any settings of the “super-admin” also if he has equals rights.
    In wordpress, instead, he can edit the “super-admin” and change what he wants…
    In my opinion this is a security problem.

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    In other web applications that I use, the first account is the “super-admin”

    Okay. Super-Admin is a very specific role in WordPress ?? And if you’re not using Multisite, you’re in the wrong subforum.

    With Single Site, an Administrator has full access to the whole site. If you don’t want someone to be an Admin, don’t make them an admin.

    I moved this from Multisite

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Admin User’ is closed to new replies.