dsp-api icon indicating copy to clipboard operation
dsp-api copied to clipboard

Bug: User without system permission is able to create sys admin

Open kilchenmann opened this issue 5 years ago • 0 comments

I figured out, that a project admin can create new user, which is good, but he can also give the new user system admin permissions, which shouldn't be possible?!

kilchenmann avatar Dec 06 '19 15:12 kilchenmann