View Issue Detail

ID	Project	Category	Submitted / Last Updated
00763	UserSpice	Misc	2019-12-27 15:21:30 / 2020-07-22 20:05:52
Reported	Albert Gukasian	Assigned To	Unassigned
Priority	none	Reported	5.0.07
Status	closed fixed	Resolution Version and Commit	5.0.08 175c3d
Summary	User permision check wrong in _admin_user.php
Description	<p>On line 566 of the file _admin_user.php exists the following code:</p> <p><code><option value="<?=$userId?>"  <?php if (!checkMenu(2,$user->data()->id) \|\| !in_array($user->data()->id,$master_account)){  echo "disabled";} ?>>Yes - Cannot be undone!</option></code></p> <p>The second part of the if condition will always validate as true for non $master_account admins and thus the option to delete the user is always disable.</p> <p>The condintion must be changed to "and" (&&) to fix the issue.</p>

November 2021

<p>You're absolutely right. Thank you for finding this. Resoved for 5.0.9</p>