user can add admin!

Permalink
Hey everyone,
if i give a registered user the ability to see and only to see dashboard/groups and users/add user, he still can add users even as administrator.
This is been reproducable in all my C 5.4 sites!
someone an Idea?
Thanks in advance!

Xanweb
 
okhayat replied on at Permalink Reply
okhayat
That's right, because the permission means he can access that page, including its functionalities unless the functions check for the user's permission.