Just one superuser?

The rule is now that a user can only create users with less authority,
right? So even a superuser cannot create additional superusers - they
would have to be created directly in the db?

···

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522

The rule is correct but there is one exception - users with the ALL
authority / admins can create other admins.

···

On Sun, Sep 23, 2012 at 10:20 PM, Knut Staring <knutst@gmail.com> wrote:

The rule is now that a user can only create users with less authority,
right? So even a superuser cannot create additional superusers - they
would have to be created directly in the db?

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

_______________________________________________
Mailing list: DHIS 2 developers in Launchpad
Post to : dhis2-devs@lists.launchpad.net
Unsubscribe : DHIS 2 developers in Launchpad
More help : ListHelp - Launchpad Help

Ok, I just saw that I couldn't create further admin users in a fresh
instance that uses dhis2demo.backup.

···

On Sun, Sep 23, 2012 at 10:27 PM, Lars Helge Øverland <larshelge@gmail.com> wrote:

The rule is correct but there is one exception - users with the ALL
authority / admins can create other admins.

On Sun, Sep 23, 2012 at 10:20 PM, Knut Staring <knutst@gmail.com> wrote:

The rule is now that a user can only create users with less authority,
right? So even a superuser cannot create additional superusers - they
would have to be created directly in the db?

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

_______________________________________________
Mailing list: DHIS 2 developers in Launchpad
Post to : dhis2-devs@lists.launchpad.net
Unsubscribe : DHIS 2 developers in Launchpad
More help : ListHelp - Launchpad Help

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522

The issue is that even though I as superuser can modify all user
roles, not all of them show up when I make a new user. However, it is
a bit consistent, since I can for example add ALL to the guest role.
But the superuser role itself is not available.

···

On Sun, Sep 23, 2012 at 10:31 PM, Knut Staring <knutst@gmail.com> wrote:

Ok, I just saw that I couldn't create further admin users in a fresh
instance that uses dhis2demo.backup.

On Sun, Sep 23, 2012 at 10:27 PM, Lars Helge Øverland > <larshelge@gmail.com> wrote:

The rule is correct but there is one exception - users with the ALL
authority / admins can create other admins.

On Sun, Sep 23, 2012 at 10:20 PM, Knut Staring <knutst@gmail.com> wrote:

The rule is now that a user can only create users with less authority,
right? So even a superuser cannot create additional superusers - they
would have to be created directly in the db?

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

_______________________________________________
Mailing list: DHIS 2 developers in Launchpad
Post to : dhis2-devs@lists.launchpad.net
Unsubscribe : DHIS 2 developers in Launchpad
More help : ListHelp - Launchpad Help

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522

Hi this rule is about users, not user roles. We normally don't allow
user in the lower part of the hierarchy to create user roles.

Also we have removed the ALL authority from the admin user in demo
database, because people were doing heavy data mart exports on the
demo server which tended to take it down.

···

On Sun, Sep 23, 2012 at 10:35 PM, Knut Staring <knutst@gmail.com> wrote:

The issue is that even though I as superuser can modify all user
roles, not all of them show up when I make a new user. However, it is
a bit consistent, since I can for example add ALL to the guest role.
But the superuser role itself is not available.

On Sun, Sep 23, 2012 at 10:31 PM, Knut Staring <knutst@gmail.com> wrote:

Ok, I just saw that I couldn't create further admin users in a fresh
instance that uses dhis2demo.backup.

On Sun, Sep 23, 2012 at 10:27 PM, Lars Helge Øverland >> <larshelge@gmail.com> wrote:

The rule is correct but there is one exception - users with the ALL
authority / admins can create other admins.

On Sun, Sep 23, 2012 at 10:20 PM, Knut Staring <knutst@gmail.com> wrote:

The rule is now that a user can only create users with less authority,
right? So even a superuser cannot create additional superusers - they
would have to be created directly in the db?

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

_______________________________________________
Mailing list: DHIS 2 developers in Launchpad
Post to : dhis2-devs@lists.launchpad.net
Unsubscribe : DHIS 2 developers in Launchpad
More help : ListHelp - Launchpad Help

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org

--
Knut Staring
Dept. of Informatics, University of Oslo
+4791880522
http://dhis2.org