Testing under WAMP5 1.7.2.

Steps to reproduce:

Install Drupal.
Go to "your new site".
Click "My Account".
Click Edit tab.
Click Delete.
Click Delete on Confirmation Page.
Get kicked to the curb (access denied).

I've run it twice, and sure enough, there's no protection against User 1 deleting itself.

Comments

edmund.kwok’s picture

edmund.kwok commented
Status: Active » Closed (duplicate)

This issue was discussed before in http://drupal.org/node/46149.

Marking this duplicate.