| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 11063 | Bug reports | Security | public | 2016-04-28 07:58 | 2016-04-28 08:59 |
| Reporter | fvanderstarre | Assigned To | c_schmitz | ||
| Priority | none | Severity | minor | ||
| Status | closed | Resolution | no change required | ||
| Product Version | 2.06+ | ||||
| Summary | 11063: Superadmin account can change admin password | ||||
| Description | When logged in with a superadmin account, I noticed I could change the (main) admin account's password. I think this is potentially unsafe, but is it intentional? | ||||
| Steps To Reproduce | Log in with superadmin account - go to manage Survey Administrators - select the "admin" account - password is updateable (and can be saved). | ||||
| Tags | No tags attached. | ||||
| Bug heat | 256 | ||||
| Complete LimeSurvey version number (& build) | 2.06+ build 160129 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | Any | ||||
| Database type & version | MS SQL server 2008R2 10.50.6220 (X64) | ||||
| Server OS (if known) | DB server: Windows NT 6.1 <X64> build 7601 SP1 | ||||
| Webserver software & version (if known) | Linux RHEL 7, Apache 2.4.6 | ||||
| PHP Version | 5.6.19 | ||||
| Git branch / Pull Request URL | |||||
 |
It's needed. And it's like this on all major CMS (Drupal/Wordpress/Spip etc ....) If you don't like it : think we can use Permission event to fix it (in Plugin) |
 |
Do you mean it's necessary, in case the admin's password is lost (that's what happened to me)? |
|
|
It's not necessary, but it's really clean (for me). Sometimes : user can be "false" user for API for example too : necessary |
 |
Well, you should not make someone superadmin you don't trust the superadmin permission. ANy superadmin can export the whole DB including password hashes - a simple password change pales compared to that. |
