Skip admin_user check if "security.enable_super_user" is false

Created on 22 April 2024, about 1 year ago
Updated 12 July 2024, 12 months ago

Problem/Motivation

It is now possible to make UID 1 a normal user: https://www.drupal.org/node/2910500 β†’
In that scenario, it is not useful to block UID 1 user.

Steps to reproduce

Add this to services.yml:

parameters:
  # Toggles the super user access policy. If your website has at least one user
  # with the Administrator role, it is advised to set this to false. This allows
  # you to make user 1 a regular user, strengthening the security of your site.
  security.enable_super_user: false

Run the admin_user security check.

Proposed resolution

The admin_user check should pass if security.enable_super_user is set to false.

✨ Feature request
Status

Fixed

Version

3.0

Component

Code

Created by

πŸ‡«πŸ‡·France prudloff Lille

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024