Index: modules/user/user.module =================================================================== RCS file: /cvs/drupal/drupal/modules/user/user.module,v retrieving revision 1.893 diff -u -r1.893 user.module --- modules/user/user.module 6 Feb 2008 19:38:28 -0000 1.893 +++ modules/user/user.module 16 Feb 2008 20:28:07 -0000 @@ -868,7 +868,10 @@ } function user_edit_access($account) { - return (($GLOBALS['user']->uid == $account->uid) || user_access('administer users')) && $account->uid > 0; + // The user is only allowed to edit the account if it's their own, or they + // have the "administer users" permission. The "administer users" permission + // doesn't allow users to edit the super user account (user/1). + return (($GLOBALS['user']->uid == $account->uid) || (user_access('administer users') && $account->uid != 1)) && $account->uid > 0; } function user_load_self($arg) {