What if an admin accidentally makes a user admin or moderator? Could that happen?

We can’t protect admins from shooting themselves in the foot. If a non-trusted user gains admin access, for any reason, all bets are off. The site should be considered compromised. The site owner should follow What to do if your Discourse is compromised . 2 notes. Granting admin access isn’t as si…

it’s easy to revoke the admin/mod permission. The grant button changes to revoke.

But what if a malicious user is expecting that, and grants everyone on a 2000+ -user Discourse forum admin permissions and revokes permissions on all existing admins, then suspends the existing admins so they cannot do anything?

If you need help recovering your forum, then sent me a DM with the console details. Note on this is, a developer access can’t be revoked.

That has not happened. It was hypothetical, but thank you.

منح وصول المسؤول عن طريق الخطأ

الدعم

IAmGav (Gavin Perch) 9 أكتوبر 2021، 7:31ص 2

من السهل سحب صلاحية المشرف/المُعدّل.

يتغير زر الإذن إلى زر السحب.

الموضوع		الردود	مرات العرض
Is there something like a "forum owner" role? Support	6	194	14 مارس 2025
Unable to Grant Admin to user Support	3	198	21 يونيو 2025
Can you have more than one admin user? Support	1	195	28 يوليو 2024
Become admin Feature	8	453	5 ديسمبر 2024
Discourse Admin function not accessible, suddenly Support	7	875	20 يناير 2020

منح وصول المسؤول عن طريق الخطأ

الموضوعات ذات الصلة