Index: branches/5.2.x/core/units/users/users_item.php
===================================================================
diff -u -N -r15608 -r16016
--- branches/5.2.x/core/units/users/users_item.php	(.../users_item.php)	(revision 15608)
+++ branches/5.2.x/core/units/users/users_item.php	(.../users_item.php)	(revision 16016)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: users_item.php 15608 2012-11-06 17:21:28Z alex $
+* @version	$Id: users_item.php 16016 2014-03-19 20:18:21Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -195,4 +195,24 @@
 
 			return $password;
 		}
-	}
\ No newline at end of file
+
+		/**
+		 * Returns fields, that are not allowed to be changed from request.
+		 *
+		 * @param array $fields_hash Fields hash.
+		 *
+		 * @return array
+		 */
+		protected function getRequestProtectedFields(array $fields_hash)
+		{
+			$fields = parent::getRequestProtectedFields($fields_hash);
+
+			$fields = array_merge($fields, Array ('PrevEmails', 'ResourceId', 'IPAddress', 'IsBanned', 'PwResetConfirm', 'PwRequestTime', 'OldStyleLogin'));
+
+			if ( !$this->Application->isAdmin ) {
+				$fields = array_merge($fields, Array ('UserType', 'Status', 'EmailVerified', 'IsBanned'));
+			}
+
+			return $fields;
+		}
+	}