GOD Admins vs Super User.

Posted: Sun May 30, 2004 10:52 am

I just asked one of my super users to try and Edit my GOD admin. He was able to do this.
Is there anyway to prevent a Super from Deleteing a GOD.
When I try to set them as say a Forums Admin they can't login as Admin.
They can only login as a Super for some reason.
What I am am asking, is there a way to say PW protect My GOD Account.
Say me or somewants to edit a Admin. Have it so they have to type in a PW to access this, and if they have the PW to get in only have Super's there and not GOD's?
If protector or any Security feature is bypassed, I am in fear of them getting to my GOD Account again.

Captain Joined: Jan 05, 2004 Posts: 425

Hi Raptor1,

I just tested this on my site which is running nuke 6.9 with chatserv's 2.3 patches and Protector 1.15b2 installed.

Yes, a Superuser can edit the God admin account. That's unexpected to say the least! But it's not a Protector issue. That's totally nuke related. You'd need to edit nuke files to change this behavior. It's that way rather Protector is installed or not.

I just created another admin and gave them access to only the forums administration. It worked flawlessley. They logged in as admin and edited the forums and back out again. They did not have access to anything else except what I gave them access to.

They were able to get in both while logged in as a user of the site, and not logged in as a user of the site. Either way they could still log into admin.

I wasent able to duplicate your problem, but I'm thinking there is somethign wrong with your installation because my site dosent operate the way your describing.

What do you mean by this?

Quote:

When I try to set them as say a Forums Admin they can't login as Admin.
They can only login as a Super for some reason.

It's not right whan a forum admin is able to log in as a superuser. Something is wrong there. Do you have the supersuer check box unchecked? If so and they still can get in as a superuser this is definitely a nuke issue!

Have you verified that you made the manual edits during the protector installation exactly as described?

Darrell

Posted: Mon May 31, 2004 8:22 am

Ok I have several ppl that are part of my site and good friends that have some sort of site duties.
I have tried setting them to just there sections - Forums, Downloads, Weblinks, so forth and so on.
I was able to do this proir to PS 1.5b2
Now if I try to add them to Just Forums, they get kicked back to index.php
I'm not sure if its PS, fortress or what, but if there is a way to say, "Deny ALL excpet me from "Edit Admins then I am cool with it running like this.
I have a Static IP so this doesnt bother me.
I was hacked when I had 1.5b installed and I reinstalled site, locked it down, and done all the updates, and added the latest Security addons - Fortress, Admin Tap, and PS - Admin secure caused to many issues.
But I will do a check on my installation and see if I done something wrong.
Until then I need block all IP's from Edit Admins until I find my error.
Any Help is aprreciated. TY.

Captain Joined: Jan 05, 2004 Posts: 425

Sorry,

I don't know anything about the other two systems you mentioned. There could be something working against you, or something misconfigured. You'll need someone more knowledgeable than me.

In the mean time. Dosent Protector have a section within it where you can disallow access to certain modules?

Perhaps you can disallow your admins to access the edit admins module. If that feature works for you then you could rely on it untill you track this down.

Darrell