topic Re: Admin roles in Integration, Extension & APIs

Admin roles

Anonymous — Wed, 13 Jun 2018 15:31:39 GMT

Hello,

is there any solution how to write security that will restrict Admin roles?

I have security rule for users which can access these sections:

Problem is that user can bypass this a give RootAdmin to anyone one the server, is there any way how can I block Admin Roles in users section and Admin security rules for these users?

Thank you.

Re: Admin roles

Levi_Turner — Thu, 14 Jun 2018 14:52:29 GMT

Hey Jan,

This implies that the user has more than just Read rights on the users. Here is an example of a rule and result where they can see users but not elevate the roles of users:

Hope that helps

Re: Admin roles

Anonymous — Thu, 14 Jun 2018 15:12:44 GMT

Hello Levi,

these users needs to have possibility to add roles we defined, but not Admin role.

Thank you.