Users can delete employees. 4.5.1f

[cchambers]

Hi All,
I have looked around the forums and have seen other members trying to figure out how to delete employees.
I have no problem with regular users deleting other employees at all.

I log in as a regular user, click the employee link, select the employee and then next to mass update I click delete.
Buh Bye employee and user account.

I'd prefer this not be the case.

Here is what I have tried to fix it.
As admin, select users and give them admin privileges. Then remove the admin privileges.
Delete the browser cache, history, sessions, cookies etc and close the browser.
Log back in as regular user and the regular user can still delete other employees.

Here is what may have caused it.
I installed a fresh 4.5.1.f on an updated Ubuntu 6.06 Server LTS
I exported the Sugar database via phpMyAdmin from an apachefriends.org xampp install of 4.5.1d on Win2k.
I imported the sugar 4.5.1d database (xampp-Win2k) via phpMyAdmin into the fresh 4.5.1f Ubuntu.

I have some data I'd like to keep from the test xampp install.
Which is why I did the export.

I don't know what to do to fix it.
Thanks in advance for your advice.
Charles

[susiewilliams]

Hi Charles,

Thank you for posting this. I'm verifying that this isn't the case in 5.0 (so far, it looks like it's not an issue there).