From full-access account to Account Owner
S
Shopify
Submitted None
Team Summary
Official summary from Shopify
@rms reported an issue where a full-access users could create restricted users, even though the UI didn't make it seem like this was intended. We updated the UI to make this clearer.
Actions:
Reported by
rms
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Bounty
$500.00
Submitted
Weakness
Privilege Escalation