1

A created user was able to delete the Admin account, now I can't log in Craft anymore with an admin account. How is it possible that a normal user can delete an Admin?

I'm in contact with this user to try and re-activate the Admin account because I think the Soft delete is at work here, so fingers crossed!

Improve this question

1 Answer 1

Reset to default
1

You need to check if the normal user has an administrate permission, you can check at user -> permission. Even a normal user you still can give it an administrate user permission without change it into a admin user, but this permission is off by default for normal user.

Improve this answer
1
  • The user had Administrate permissions indeed. I managed to contact the user and revert the deletion of my account. But there was a second problem, the account was also suspended (automated after deletion) The user in question could not lift this due a 403 Forbidden... This was weird. So I had to dive into the database and found the admin user there and managed to change the suspended status back. I think this should be protected, the Admin account should never be able to be deleted in my opinion.
    – Kevon
    Nov 13, 2020 at 10:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.