Details
-
New Feature
-
Status: Closed
-
Minor
-
Resolution: Inactive
-
1.9.3
-
None
-
None
-
MOODLE_19_STABLE
Description
This came out of a conversation over lots of pasta with Skodak.....
In order to recover lost administration rights, implement something similar to Gallery. The outline is as follows...
- Create a "hidden" (but documented) script in the admin folder..... recoveradmin.php or somesuch
- It invites you to create a file in the moodle root with a given name and a randomly generated key therein and then refresh the page
- The rest of the process is locked out until this file is found to be correct - obviously, this needs to be locked down properly (I'll look/steal what Gallery does)
- Once you're in there it will do this...
-
- Allow a new manual user to be created and assigned to the administrator role
- Reset the administrator role (and assignment rights) to default
- Reset the User Policy settings to default (a source of locked out admins)
-
- The above should be options probably
- The Moodle site will NOT run with the key file in place as an additional security feature.
Attachments
Issue Links
- has been marked as being related by
-
MDL-16549 Should not be able to remove moodle/site:doanything from the Administrator Role, or add it to other roles
-
- Closed
-