When a non-admin user logs into the Web UI, in the Account Status field there will be a link for deactivating the account. The link is visible although the user doesn't have the rights to change the account status. This link should be hidden if the user doesn't have a write access to nsaccountlock attribute.
master: 0ec6b4f
Metadata Update from @edewata: - Issue assigned to edewata - Issue set to the milestone: FreeIPA 2.1.1 (bug fixing)
Login to comment on this ticket.