AnsweredAssumed Answered

User is able to edit own username

Question asked by Niall Gowanlock on Mar 26, 2014
Latest reply on Dec 28, 2014 by thy thy
I've found that in my installation when setting up a standard user in my installation I am able login as the user and edit the accounts username and also first name last name, I believe this is either a bug or problem with my installation since only Administrators should be able to make such an edit as otherwise it would be an obvious way to forge 'change log's' I'm able to disable the hyper link to disable the user being able to get to the edit profile screen however this is not a secure solution since the permission to do so remains.  

Please can anyone advise how to fix this issue?



Sugar CE - 6.5.16