[
https://issues.apache.org/jira/browse/JSPWIKI-1263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18135666#comment-18135666
]
Arturo Bernal commented on JSPWIKI-1263:
----------------------------------------
Pull request: https://github.com/apache/jspwiki/pull/569
removeGroup() now refuses to remove the group named Admin, which the default
policy grants AllPermission. A test shows the removal succeeded before and is
refused now. Editing the group to leave it without members is not covered by
this change.
> It is possible to delete the admin group, leaving no administrators to the
> system.
> ----------------------------------------------------------------------------------
>
> Key: JSPWIKI-1263
> URL: https://issues.apache.org/jira/browse/JSPWIKI-1263
> Project: JSPWiki
> Issue Type: Bug
> Reporter: Alex O'Ree
> Priority: Major
> Labels: pull-request-available
>
> probably should be some kind of check to ensure at least one administrative
> account remains
>
> strangely, i was able to recreate the admin group and get back admin
> permissions.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
