registered users can click on 'admin' and get into it, too
I've spent a couple hours trying to figure this out, and now I'm hoping someone here can tell me how to fix this.
A new wiki, data from a mediawiki installation imported, but not users. People have to register again.
Anybody logged in sees the admin folder in the applications module. Anybody logged in can click on that folder and get into the guts of the administration panels.
Clearly, not a good idea. But I can't see a way to stop this beyond deleting the whole applications module (really not viable). I've searched up and down on the permissions pages (admin users, groups, etc etc) and I can't see any setting that seems to apply.
Unregistered vistors only see the login/registration box, so that works at least.
Can anyone help me with this? I'd be very, very thankful.
;){kind=link}