Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

demo user "moss" has admin privileges #3625

Closed
rhafer opened this issue Apr 29, 2022 · 1 comment · Fixed by #4261
Closed

demo user "moss" has admin privileges #3625

rhafer opened this issue Apr 29, 2022 · 1 comment · Fixed by #4261

Comments

@rhafer
Copy link
Contributor

rhafer commented Apr 29, 2022

Describe the bug

Our demo user "moss" will get admin privileges. Even though demo users are disabled by default I think it is a bad idea to have a demo user with a known default password that allows admin access. It just increase the risk of creating ocis instances with gaping securitiy issues in the wild.

cc @C0rby

@michl19
Copy link
Contributor

michl19 commented Jul 18, 2022

Downgrade "Moss" to space admin.

@micbar micbar added this to the 2.0.0 General Availability milestone Jul 18, 2022
@rhafer rhafer self-assigned this Jul 22, 2022
rhafer added a commit to rhafer/ocis that referenced this issue Jul 22, 2022
rhafer added a commit to rhafer/ocis that referenced this issue Jul 22, 2022
rhafer added a commit that referenced this issue Jul 22, 2022
ownclouders pushed a commit that referenced this issue Jul 22, 2022
Author: Ralf Haferkamp <[email protected]>
Date:   Fri Jul 22 15:24:10 2022 +0200

    Demote demo user "moss" from admin to space-admin

    Fixes: #3625
ownclouders pushed a commit that referenced this issue Jul 23, 2022
Author: Ralf Haferkamp <[email protected]>
Date:   Fri Jul 22 15:24:10 2022 +0200

    Demote demo user "moss" from admin to space-admin

    Fixes: #3625
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

3 participants