I implemented an Elgg install for a client, and the day before launch it seemed prudent to remove myself as admin so that my test data and profile etc didn't display. Simple - login as Admin2 and delete Admin1 - bad, bad, bad!
Doing this completely corrupts the database and kills just about everything.
I can't believe the system allows for this given the catastrophic consequences... my bad too I guess for not backing up db... waiting for webhost to confirm if they have a nightly db backup.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- Robb Shecter@openid_9551
Robb Shecter - 0 likes
- willsoon@willsoon
willsoon - 0 likes
- Kevin Jardine@kevin
Kevin Jardine - 0 likes
- Sandy@shirtz
Sandy - 0 likes
- Kevin Jardine@kevin
Kevin Jardine - 0 likes
- Kevin Jardine@kevin
Kevin Jardine - 0 likes
- Kevin Jardine@kevin
Kevin Jardine - 0 likes
You must log in to post replies.Wow, Interesting -- thanks for the post.
Thankfully webhost did have nightly backup - restored ok.
Crazy sick feeling now vanished...
Just for the record, I reported this problem on the issue tracker three weeks ago:
http://trac.elgg.org/elgg/ticket/522
Without realizing the ramifications, I upgraded one of my site members to admin. By doing so, he can no longer see his activity, his friends, his dashboard....... Admins have a view that is unlike users. Can I demote him to a user? I cannot see how to do this anywhere.
Hi Sandy,
Curiously, this item in trac:
http://trac.elgg.org/elgg/ticket/240
says that this problem is fixed. However, I can see nothing in the UI or source code that allows you to downgrade an admin.
By the way, making someone an admin should not have any of the affects that you describe (and do not on any of my Elgg sites). It sounds like you may have a broken plugin disrupting your site?
I have re-opened the ticket I mentioned as I think Curverider agrees that this is a needed feature and I imagine the code changes just didn't get added to the released Elgg code for some reason.
Hi Dave,
My apologies.
I misread the date in Trac and thought it said 01 September when it really said 09 January.
So that's the why the fix is not in a release version yet.
Next time I'll look at the dates more carefully.