2
Hi,
I 've just find the answers myself.
Ok, to prevent users with admin right of Extended Profiles module (but not "webmaster") from deleting webmasters , I added the following codes at line 187 of admin/user.php of the module.
case "delete":
$obj =& $handler->getUser($_REQUEST['id']);
/*modified for better protect of webmaster group*/
$group_ids = $member_handler->getGroupsByUser($obj->getVar('uid')) ;
// true if current user is in group ID #1, that is webmaster group
if ($in_group = in_array(1, $group_ids)){
redirect_header('user.php', 3, _PROFILE_AM__CANNOTDELETEADMIN);
exit();
}
/*modified for better protect of webmaster group*/
By doing this, however, you have to remove the user from "webmaster" group before deleting it. Though it's a little bit inconvenient, it's more secure, in my own opions.
Regards
Cody
