Good Afternoon!
I have a small issue that I am stuck on.
I am trying to develop a web app. This web app uses the extended users module to register the users with some constraints:
1. Only superadmin/ admin can register a user (or create a user).
2. This user has to be deactivated
3. Once the user logs in the user is activated (yet to implement, needs to be implemented using SMS OTP service)
Now since the super admin/ admin can create the users I want the super admin/ admin to be able to edit them too.
So my question is: How can the super admin / admin do that.
I have listed the users in a tabular manner (named as employee-list.php) and given an edit link to them, similar to what is mentioned at viewtopic.php?f=4&t=8758. But what happens it that thought the querystring parameter is correctly displayed, I still get to see only the details of the logged in user in the edit form (named as employee-edit.php).
For example, I am having the crafted URL's as:
But I get the data of id=116 if i am logged in from the user account at id 116 an so on for any of the crafted URL mentioned above.
I also was thinking that will it be possible to implement the extended users module using the custom routes module? I suppose that will be a good option if possible. But I am not sure if that can be done.
Please help.
Regards,
GenXCoders
I have a small issue that I am stuck on.
I am trying to develop a web app. This web app uses the extended users module to register the users with some constraints:
1. Only superadmin/ admin can register a user (or create a user).
2. This user has to be deactivated
3. Once the user logs in the user is activated (yet to implement, needs to be implemented using SMS OTP service)
Now since the super admin/ admin can create the users I want the super admin/ admin to be able to edit them too.
So my question is: How can the super admin / admin do that.
I have listed the users in a tabular manner (named as employee-list.php) and given an edit link to them, similar to what is mentioned at viewtopic.php?f=4&t=8758. But what happens it that thought the querystring parameter is correctly displayed, I still get to see only the details of the logged in user in the edit form (named as employee-edit.php).
For example, I am having the crafted URL's as:
But I get the data of id=116 if i am logged in from the user account at id 116 an so on for any of the crafted URL mentioned above.
I also was thinking that will it be possible to implement the extended users module using the custom routes module? I suppose that will be a good option if possible. But I am not sure if that can be done.
Please help.
Regards,
GenXCoders