Server 5.0.4 makes EVERY user an Admin

Originator:pepi.zawodsky
Number:rdar://22901800 Date Originated:29-Sep-2015 09:36 PM
Status:Open Resolved:
Product:OS X Server Product Version:5.0.4
Classification:Security Reproducible:Always
 
Summary:
Server 5.0.4 makes EVERY user an Admin

Steps to Reproduce:
Run an OD master.
Create a new user.
Do NOT tick the “can administer this server” checkbox.
See the User list. It shows every newly created user as admin.

Expected Results:
User's should never be admins by default.

Actual Results:
You become an admin!
And YOU become an admin!
Everyone becomes an admin.

Regression:
This wasn't present in 4.1.5.

Notes:
With every user being an admin, OS X “Server” is the ultimate anarchism system.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!