Avatars of others changeable by non-admins

Bugs & Issues
1

One of my team members found that you could change other users avatars without having Admin access. The rest of the properties are read-only—as expected.

2

@Haslien We have the fix in plans for near future, working on permissions right now