Ensure no roles are "admin" roles (8.x)

Created on 15 April 2015, over 9 years ago
Updated 17 May 2023, over 1 year ago

Problem/Motivation

After https://www.drupal.org/node/2435075 β†’ - an admin role is as horrible as uid 1.

Proposed resolution

  • On install, remove the admin role property from all roles.
  • Block access to setting the admin role in the user settings admin form.

Remaining tasks

Should we also add a configuration override β†’ to dynamically override all roles?

User interface changes

The admin role element is removed from the user settings admin form.

API changes

Introduces a new service, paranoia.defanger (so named because it "defangs" dangerous settings).

Data model changes

None.

πŸ“Œ Task
Status

Fixed

Version

1.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States greggles Denver, Colorado, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024