Preventing users from editing other users
Permalink
Hi folks,
Running v5.4.1 and I have enabled Advanced Permissions. I set up a "Publishers" group which should have access to most pages for editing. However, all users I add into the Publishers group are able to edit or deactivate any other user (except admin) from Users and Groups. I can't seem to find a way to prevent a user from mucking around with other user accounts.
Is there a way to lock down a user to only editing their own profile?
Cheers
John Lock
Running v5.4.1 and I have enabled Advanced Permissions. I set up a "Publishers" group which should have access to most pages for editing. However, all users I add into the Publishers group are able to edit or deactivate any other user (except admin) from Users and Groups. I can't seem to find a way to prevent a user from mucking around with other user accounts.
Is there a way to lock down a user to only editing their own profile?
Cheers
John Lock
Sorry, that doesn't quite do it. Yes, it does effectively keep people from editing user profiles... including their own! I actually don't care if users see other profiles. But they should not be able to modify them. That seems like basic security common sense to me. That's why I am baffled that I cannot set it up that way.
Cheers!
John
Cheers!
John
It will be under the "click here to modify other permissions"
hope this helps