Do not use allow all default in production

[tolawho]

When I set full permission for my admin account. The other people can't see the resource they dont have permission. But when I remove one permission from admin, other people can see permission admin dont have even they dont have. I example my case:
Admin with full permission

The buyer view:

When I remove Plan permission from admin

The buyer view, now they can manage the plans:


Actually they don't have the permission for the plan

[m2de]

Hi. Thanks for your detailed issue report. That currently is intentional behaviour to stop you (the admin) from locking yourself out of features. However we are aware that this is undesirable for many in a production environment and are addressing this in the next major release of Brandenburg and this nova package.