Omeka icon indicating copy to clipboard operation
Omeka copied to clipboard

New-user role default should be "Contributor," not "Super"

Open dsalo opened this issue 1 year ago • 1 comments

In the role-assignment dropdown in the Add New User screen, the default role is "Super." The default should instead be the lowest-privilege role, "Contributor."

The "Super" default is problematic for security because it inclines Omeka admins to violate the Principle of Least Privilege by accidentally/thoughtlessly/cluelessly assigning unnecessary system privileges to new users. It is also a tiny bit annoying for admins because typically, most users on an Omeka instance will be Contributors, not Supers.

(Since this touches on security, I did use the security email first, and was encouraged to post an issue.)

dsalo avatar May 17 '23 18:05 dsalo