I was messing around with the console and tried a
"rmdir /" which worked. This command deleted everything
in the directory (lukily it was just a test directory),
but if the console can delete the main directory a the
UI can too (if you know what you are doing).
The ability for an admin to delete the main directory
isn't nearly as bad as any user with ddelete
permissions having the ability to do so.
I will fix this before the day is out.
Logged In: YES
user_id=1049916
And release 0.9.1 before the day is out.
Logged In: YES
user_id=1049916
fixed. Added a test against "/". 0.9.1 is rereleased.
Now users cannot rename or get properties of the root
directory also.