id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
29110	A user with change_permission for the User model can make themselves a superuser.	Jonathan Sundqvist	nobody	The expected behaviour is that only a superuser should be able to make others a superuser. The current behaviour is that you only need a change_permission on the user table to get superuser access. 	Bug	closed	contrib.admin	dev	Normal	duplicate			Unreviewed	0	0	0	0	0	0