ok i found everything and iv got it all set up, only one problem now, when i try to delete my test user it tells me im not authorize to perform this action, so......im sorry iv done lots of searching i cant find where to change it from a admin action to a user action......any ideas where that might be?
You'd have to unregister the action, then reregister it for authenticated users. That's assuming the action file doesn't have admin_gatekeeper() in it, in which case you won't be able to do anything with it anyway.
Honestly, you're better off using a new action. The action you're trying to use can delete any arbitrary user if you're an admin. Trying to hijack that action for anyone to use could lead to a security issue where a non admin could delete another account. There are ways to avoid this using your method of hijacking that action, but that would require more work than just writing a new action.
Read the action file to see how the user deletion is done, then implement that in your own action that doesn't require a guid to be passed, but gets the currently logged in user to delete.
if you've 'found everything... all set up... not authorize to perform this action...' -> you're doing something very wrongly in the wrong place - but it's kinda hard to say what's really happening without seeing your code - and without such details - the rest of us got no idea what you're coding and where @ ? ;-X
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by Raül Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.