[Phpslash-devel] Troublemaking: what you can do with 'author' rights

[Peter C. <pe...@kr...>]

Hi

I'm coding up some extras for Back-End's user admin, and thought I'd point out the obvious: if you assign a user 'author' rights, they can then assign themselves or anyone else 'root' rights. Probably not an issue for a typical phpSlash site, but worth bearing in mind for larger/paranoid sites...

(maybe I'm bored?)

Peter