[webmin-l] change password changes available modules for webmin user

[Marc P. <pet...@ma...>]

dear list members

i'm experiencing a funny behavior with the latest version 1.240 of  
webmin on fedora core 3:

i set up a webmin user with the following modules (there are no  
webmin groups):
- Global ACL
- Change Language and Theme
- Change Passwords
- Read User Mail
- Virtualmin Virtual Servers

with the default setting of the Change Password module i always get  
"Failed to change password : Failed to encrypt password" (MD5 perl  
module is installed). so i changed the setting to not having to enter  
the old password.

with this setting password changing seems to work. but as soon as the  
password is changed the webmin user setting gets changed as well. now  
the user has all of a sudden access to more modules than configures  
before:

- Global ACL
- Apache Webserver
- Change Language and Theme
- Change Passwords
- File Manager
- Protected Web Directories
- Read User Mail
- Virtualmin Virtual Servers

these are 3 modules more than in my initial setup. can anybody  
explain this? is my configuration not correct? thanks for any advice.

regards,
marc