We have a use case where we have certain roles in our system that we do not want anyone ( even those with masquerading privileges ) to masquerade as a user with those roles. Because of this, I made a change to allow you to provide some "blocked roles" that will keep other from masquerading as that user.

Patch to follow.

Comments

travist’s picture

StatusFileSize
new2.45 KB

Here is the patch. If you find it valuable, I can re-roll it for the latest versions.

Thanks,

Travis.

travist’s picture

StatusFileSize
new2.49 KB

Here is a better patch that will always allow user 1 to bypass this...

travist’s picture

Status:Active» Needs review
artkon’s picture

Version:6.x-1.4» 6.x-1.7
StatusFileSize
new2.56 KB

Patch for new tag 6.x-1.7