Index: branches/5.3.x/core/units/users/users_item.php
===================================================================
diff -u -N -r15938 -r16111
--- branches/5.3.x/core/units/users/users_item.php	(.../users_item.php)	(revision 15938)
+++ branches/5.3.x/core/units/users/users_item.php	(.../users_item.php)	(revision 16111)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: users_item.php 15938 2013-08-14 09:33:06Z alex $
+* @version	$Id: users_item.php 16111 2014-12-07 14:49:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -197,4 +197,24 @@
 
 			return $password;
 		}
-	}
\ No newline at end of file
+
+		/**
+		 * Returns fields, that are not allowed to be changed from request.
+		 *
+		 * @param array $fields_hash Fields hash.
+		 *
+		 * @return array
+		 */
+		protected function getRequestProtectedFields(array $fields_hash)
+		{
+			$fields = parent::getRequestProtectedFields($fields_hash);
+
+			$fields = array_merge($fields, Array ('PrevEmails', 'ResourceId', 'IPAddress', 'IsBanned', 'PwResetConfirm', 'PwRequestTime', 'OldStyleLogin'));
+
+			if ( !$this->Application->isAdmin ) {
+				$fields = array_merge($fields, Array ('UserType', 'Status', 'EmailVerified', 'IsBanned'));
+			}
+
+			return $fields;
+		}
+	}