Users who has access to user module for administer users can simply modify account type of ANY user without limit. Even if they can't "view accounttypes" in accounttypes module.

Comments

rconstantine’s picture

rconstantine commented

You're talking about the user_edit form, right? Looks like I need to change the permission from "administer users" to "administer access control". Thanks.

rconstantine’s picture

rconstantine commented
Status: Active » Fixed

Fixed it. Will be in next upload.

sza’s picture

sza commented

You're talking about the user_edit form, right?

Yes.

Fixed it. Will be in next upload.

Ok.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)