The sudo feature

Joel Peshkin bugreport at peshkin.net
Thu Dec 15 09:51:48 UTC 2005


Gervase Markham wrote:

> One question that occurred to me: if only admins can impersonate other 
> users, what's the point of bz_sudo_protect? After all, if they are 
> admins, they can just go and change the Param value to remove the 
> person they want to impersonate.

Only admins by default.   One could take a support or training person 
and add them to bz_sudo without permitting them to have full admin 
permissions.





More information about the developers mailing list