Registered: 12/22/03
Posts: 10
Loc: Arlington, Virginia
I have a user claiming he can log in but cannot post. While viewing his profile to try to trouble-shoot the situation, I noticed the "Become this User" button.
I am wondering if I clicked on the button, would I become him for long enough to test whether I (he) is able to post? How do I revert back to my admin account when I'm done? I'm a little reluctant to test this feature until I know exactly what it does and if there are any questionable side effects (I'm not thrilled about the prospect of entering someone elses morbid virtual body)
Express Hosting
"We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
#167025 - 10/24/0611:50 PMRe: What is the Purpose of: Become this Member?
[Re: zeroflux]
in some cases it can be used to test if a problem is with their account.
basicly you would "become" this member to check things if you need to
i sugest you dont do this lightly as it allows you access to everything they have (pm's as well)
once done, you can logout normally, and then log back in with your name....not sure, but there is prolly another way yo get back to your normal account as well
Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
You will be logged in as this user until which time you log out and log back in as yourself.
Mainly this is made so that you as the admin can valdate any "issues" with a user account (such as if they're experiancing an error you can judge if its a software issue or if its "user error").
I think the feature should be removed. One particular customer of yours is using it to break privacy, and post as another user to make it look like he haven't banned him.
Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
Originally Posted By: Hansi
I think the feature should be removed. One particular customer of yours is using it to break privacy, and post as another user to make it look like he haven't banned him.
And what would stop an admin from logging into MySQL and updating the password hash of said user and doing the same thing? In all honesty I believe this feature is a good one to have as it allows the admin to preform tasks as a user, should it be resetting things on their behalf (as we don't have the ability to reset passwords in the CP at the presant time) or to validate abuse claims of users.