Support

Hello Michael,

This is actually a generic Joomla! question, not an Admin Tools one. I'll reply it anyway since it's actually a fairly good security point.

You cannot prevent Super Users from accessing com_installer or impose any other of restrictions on their accounts. Super Users are users who belong to at least one group that has the Super User privilege set to Allowed in Global Configuration, Permissions. This permission is a "skeleton key" / "God Mode switch": it explicitly grants them any ACL privilege. As such they have access to everything.

What you should be doing is downgrading the other administrator persons' accounts to the plain old Administrator user group. By default, the Installer's permissions for the Administrator group as set to Denied, i.e. they are not allowed to access com_installer.

Please do remember that if you want your Administrators to access other areas of the site that they currently can't just give the Administrator group the respective ACL permission(s).

I forgot to say why this is not (and will not be) implemented in Admin Tools. Any Super User can disable the System – Admin Tools plugin. Therefore any protection which would be applied by Admin Tools would be circumvented by a Super User.

In fact, the last time we had this feature in Admin Tools was when it would run in Joomla! 1.5 which lacked ACL. The whole point of it was to prevent Administrators (not Super Administrators – the old name of Super Users) from accessing com_installer. We never thought that you can effectively disallow Super Users from accessing com_installer. You can't prevent the God of the system from doing anything.

Michael, as I already explained: this would NOT be effective. A Super User could simply go to Extensions, Plugins and disable the System - Admin Tools plugin. Then the password WOULD NOT BE APPLIED because Admin Tools' WOULD NOT BE RUNNING on your site.

Essentially, what you're asking me is to install a padlock on the lid of a box that has no bottom. If someone just lifts the bottomless box they can get to the contents without touching the padlock. I could never offer such a feature in good conscience. It's called snake oil and I'm DEFINITELY NOT in the business of selling it!

Please read my previous post very carefully. I explained why any kind of protection of com_installer through Admin Tools is just plain wrong and I already told you how to do it properly, i.e. make these users plain Administrators.