Any newly created Zikula account is getting Administrators access. User creates fakeFAS account on pt3, logs into Zikula, and new account in Zikula has Administrators group membership.
This appears to be fixed -- line 52 of pnuserapi.php should use a == and not a =. However, the change needs to be rolled into the zikula-fedora module and a new release made.
Sorry, fedora-zikula module. http://fedorahosted.org/fedora-zikula
to comment on this ticket.