moderated Re: Changing email address security issue #misc


 

On Wed, Feb 3, 2021 at 12:50 PM D R Stinson <dano@...> wrote:
 
From my viewpoint the problem is the user of the authority, not the ability. As noted above, taking away the ability to change an owner's or moderator's would avoid most on these risks. Added to this, I suggest that a moderator should not be able to change the role of owner. I see hijacking the ownership of a group to be a greater problem.
 
Moderators already cannot change the Role of owners.

Thanks,
Mark

Join main@beta.groups.io to automatically receive all group messages.