don't allow group admins to change admin's accounts

diff --git a/lib/subadmin.php b/lib/subadmin.php
index 8d4f413b104fb90445fd35df4d34c50cc22b60fa..718fe922ffe424c4b03f98489d25c1dcf45f6a2c 100644 (file)
--- a/lib/subadmin.php
+++ b/lib/subadmin.php
@@ -141,6 +141,9 @@ class OC_SubAdmin{
                if(!self::isSubAdmin($subadmin)){
                        return false;
                }
+               if(OC_Group::inGroup($user, 'admin')){
+                       return false;
+               }
                $accessiblegroups = self::getSubAdminsGroups($subadmin);
                foreach($accessiblegroups as $accessiblegroup){
                        if(OC_Group::inGroup($user, $accessiblegroup)){