Admin Password can be reset by others admin users
Closed this issue · 2 comments
jotiprime commented
If a user have a admin role, can password reset the admin default user. It will be better that the password of the admin user will not be reseteable.
fred4jupiter commented
Yes, that´s the way it is implemented now. I depends on the perspective. Otherwise the admin account is not "recoverable" if you cannot reset it by another admin user. But I understand you point. I may think about it.
fred4jupiter commented
If changed the behaviour so that the admin user will not be shown in the user list for other admins. This way other admins cannot update the default admin user. See latest release version 2.8.3