Comment 1 for bug 1734178

Revision history for this message
Cecilia Vela Gurovic (ceciliavg) wrote :

Checking the code I noted that in fact, we have a configuration setting for deleting users.
If we add in config.php
$cfg->alwaysallowselfdelete = true;

we are able to delete any user, even if there is no self-registration enabled in any institution. We can always delete a user but the last admin of the site. But I consider this correct as the admin does not represent a real person but a role in the system.

Now the question is, should we leave the 'alwaysallowselfdelete' and set it to true as default for every new site and upgraded one, or should we remove this configuration?