Hi,

While testing I observed that an administrator, say who has edit access to the roles role
can empty the users in role listbox and/ or give themselves Read Only access thereafter
the only way out is to either log in under a different user or go to the database and re-instate the administrator.

I agree no one should be foolish enough to do the above but it is possible. How can the code cater for that?

regards

With great power comes great responsibility.

I wouldnt even have thought to try that out, but wow, that is a potentially dangerous behavior.
As an Administrator on a system you cant gimp them to where they can not completely modify whatever. However, I would agree that an administrator account should not be able to be set to read-only. When I get around to it, I will look at making a change to only allow for admin accounts to be deletable from other admin accounts. Another thought would be to make a rule where, there has to be atleast 1 admin account present, ie if an account is marked as admin and is the only one it can not be deleted.

The last part can be done via SQL query where you use the COUNT function to check for the number of admin accounts, if > 1 then deletion is allowed else no. This can be easily implemented into the Validate Delete method, to prevent deletion of the only admin account.

Let me know if you need more help.

Hi,

Thanks for your reply. Rumour has it, one day an admin who was off sick passed his credentials over the phone to a less senior employee to solve an urgent problem. Thereafter, everyone including plant operators knew the admin username and password.

Yes, in my trade (engineering) the admin credentials become common knowledge. It should not happen but t it does.

The problem happens because the user who wiped his/her rights out should not be in the page they are in, so when they save they get the exception.

My thoughts on it so far rather than throwing an exception just redirect to the home page and an admin should re-create the admin account from the database. Or create an admin account than can't be altered and always has "Edit" capability only; and that means, another access type that does not include "none".

regards