id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 29110 A user with change_permission for the User model can make themselves a superuser. Jonathan Sundqvist nobody The expected behaviour is that only a superuser should be able to make others a superuser. The current behaviour is that you only need a change_permission on the user table to get superuser access. Bug closed contrib.admin dev Normal duplicate Unreviewed 0 0 0 0 0 0