zikula/core — pull request #207 by rmburkhead (2011-12-20 08:05:29+00:00)
Title: Ticket 167 - Fix for Subadmin access when reg disabled.

Fixes #167.

An error in src/system/Users/lib/Users/Controller/Admin.php inverted the condition where users were required to have ADMIN access to add users when registration was disabled. It incorrectly required ADMIN access when registration was enabled. It should have required it when admin access was disabled. This allows the main administrative group to prevent subadmins from adding users through the administrative panel when registration is disabled.

Additionally, subadmins were shown the links on the admin panel to create users, even if registration was disabled. The same access levels checks have been added to the links related to adding users as is used in the above.