• From: Pakistan, Karachi
  • Registered: 10/01/2019
  • Posts: 6

Topic: low level access user can amend high level user

Hi,
I have created a user level and gave it every access except for creating companies and installation of modules etc.

now when i login from this new level user it can change the System Administrator user as well.

What will i do to protect System Administrator
I want System Administrator to be the supreme user of this app.

Please guide me

Thanks

  • From: Singapore, India, Chennai
  • Registered: 05/02/2009
  • Posts: 6,160

Re: low level access user can amend high level user

Which company did you login to create your user?

Only the default company can create new companies.
Never use the default company as your operating company. Use it for crating new companies and installing modules only.
Log into the target company (no-default) and then create your user without the right to create other users / edit access levels.

Post's attachments

Restricted_Admin.png 22.4 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

apmuthu's Website

  • From: Pakistan, Karachi
  • Registered: 10/01/2019
  • Posts: 6

Re: low level access user can amend high level user

thank you
but i have only one company( thats the way i want it)
and i want to give the new user role all the rights but to edit Administrator.
This new user role can even create new users, but cannot edit Administrator

Please guide me

  • From: Colombia
  • Registered: 12/29/2014
  • Posts: 629

Re: low level access user can amend high level user

This is what you want

Post's attachments

AccessLevelsEditPermission.png 38.4 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.
The FrontAccounting Wiki(Manual, examples, tips, setup info, links to accounting sites, etc) https://frontaccounting.com/fawiki/
  • From: Singapore, India, Chennai
  • Registered: 05/02/2009
  • Posts: 6,160

Re: low level access user can amend high level user

Best practice dictates the use of the default company only to create new companies and install / uninstall extensions. Using a non-default company for your regular company is advised even if you have just one company.

apmuthu's Website