Fixed bug - mods can use admin tools

[falcon-36]

Fixed bug where mods could use admin tools.

[cypherbits]

Hi, this could be valid, but this works as intended. We seem to check permissions on the inside of the functions. For example, the reset password, we allow to change password for users below our permission level: for example super mods can change password for mods and normal members only.

$stmt=$db->prepare('SELECT null FROM ' . PREFIX . 'members WHERE nickname=? AND status<?;');

See the status < ? where ? is current user status.

[DanWin]

Yes, this is indeed intended. It might be a bit confusing that the features are behind the Admin button on the control bar, but they were meant to be accessible to mods as well. This may however not be desirable by everyone, so perhaps this could be changed into a new setting? Tackling #33 with a much finer permission system, where individual permissions could be given on a per-role or even per-user setting would probably be the best way to go about this.