Members can edit the ads of other members

Please navigate to Administration > Settings > Membership Levels and click on the membership level that belongs to the members in question. Ensure that any abnormal fields are disabled, such as "ads edit any ad."

Edit: I'll check it on a test environment now to make sure this isn't an issue with the script itself.

Update: I can only recreate this issue when the permissions are out-of-line, as mentioned above.

In other words, your members will automatically have the ability to edit any ad they create.

Correct permissions for a standard member should be

• ads add
• ads browse
• ads search
• ads view

By giving a member 'Ads add' the system will automatically give them the power to edit their own ads.

If you give them anythin g else, you are giving them administrative powers. Do not give them 'ads approving' or 'ads delete any ad' or 'ads edit any ad'

Of course, if you want to create an 'Ads Moderator' you could give them specific administrative powers just for the ads section

Yes i have done the membership like this and all the ads edit is disabled for my 2 members( one standard and other is promotion). i  was post ad with one user name and i was checking the same ad with my admin login into my site thats why i was gettign the admin control for ads to edit.

other wise for 2 normal members its fine.

But don't u think its a bug that site accept the admin apart from admin panel??

If you were getting the editing options when logged in under an administration account, then that would mean that everything is working properly. I do not understand what you mean by your post concerning it being a bug.

LOL. It doesn't matter what membership level you set for yourself, you are always going to be an admin.

Of course, if you want to lock yourself out of your own forum administrative abilities, I can tell you how to do that if you wish.......

It's simple: remove your administration powers from your account, making your community free from an administrative figure, sending it into chaos.

Ok, I'm pretty sure I was joking when I said that. Being sarcastic? Didn't anyone else see that or did I do it wrong?

I think Houstonlively said it best.

Ok, Ok, Ok, I can't stand it anymore..... I gotta tell him (her?)

1. LOGOUT SO YOU ARE A GUEST
2. CLICK ON THE LINK THAT SAYS "JOIN"
3. MAKE SOMEBODY UP, MAYBE YOUR FAVORITE TV STAR
4. FILL IN ALL THE BLANKS WITH THE LITTLE RED ASTERISK NEXT TO THEM
5. MAKE SURE ALL THE INFORMATION YOU USE IS FAKE
6. USE A REAL EMAIL ADDRESS
7. MAKE SURE IT'S NOT THE SAME AS THE ONE YOU USED AS AN ADMIN
8. CLICK THE SEND BUTTON
9. GO BACK AND FIX ALL THE THINGS IT TELLS YOU YOU MISSED
10. CLICK THE SEND BUTTON AGAIN
11. LOGOUT
12. LOG BACK IN AS AN ADMIN
13. GO TO THE ADMINISTRATIVE PAGE
14. CLICK ON MEMBERS
15. CLICK ON THE FAKE MOVIE STARS NAME
16. SELECT APPROVED
17. LOGOUT OF YOUR SITE
18. LOG BACK IN AS THAT FAKE MOVIE STAR YOU MADE UP
19. CHECK YOUR ADS PAGE

You see? Simple ....

Where's the fun in that when you can just remove your administration powers? This should be a feature: you have an option to remove your only admin, which, when done, hashes your database information, meaning you cannot undo the damage.

(shhhhhhhhhh! thats a secret!)

Oh, come on. You know AlexT has been experimenting with it. Why do you think we have so many reports of runaway passwords?