Index: trunk/kernel/action.php
===================================================================
diff -u -r104 -r168
--- trunk/kernel/action.php	(.../action.php)	(revision 104)
+++ trunk/kernel/action.php	(.../action.php)	(revision 168)
@@ -1,5 +1,7 @@
 <?php
 
+$ro_perm = $objSession->HasSystemPermission("SYSTEM_ACCESS.READONLY");
+
 if( defined('DEBUG_ACTIONS') && (DEBUG_ACTIONS & KERNEL_ACTIONS) == KERNEL_ACTIONS )
 {
 	echo "Kernel Action $Action<br>\n";
@@ -268,6 +270,8 @@
         break;
  
        case "m_edit_permissions":           
+          if($ro_perm) break;
+          
           if($_POST["CatEditStatus"] != -1)
           {
             $GroupId = $_POST["GroupId"];
@@ -357,6 +361,7 @@
         break;
 
       case "m_user_addto_group":      	
+            if($ro_perm) break;
             $user = $_POST["UserId"];
             if(is_numeric($user))
             {            
@@ -380,6 +385,7 @@
             }
       break;
      case "m_group_add_user":       
+         if($ro_perm) break;
          $group = $_POST["GroupId"];
          $EditGroups = new clsGroupList();
          $EditGroups->SourceTable = $objSession->GetEditTable($objGroups->SourceTable);
@@ -397,6 +403,7 @@
 
       break;
       case "m_group_removeuser":
+          if($ro_perm) break;
           $group = $_POST["GroupId"];
           $g =  $objGroups->GetItem($group);
           if($group>0)
@@ -409,6 +416,7 @@
           }
       break;    
       case "m_user_removegroup":
+           if($ro_perm) break;
            $user = $_POST["UserId"];
            if($user>0)
            {  
@@ -1998,9 +2006,12 @@
 
 // ALL Saving Stuff From Temp Tables Heppens Here
 
+//echo "==== BEGIN ==== <br>";
+$has_perm = $objSession->HasSystemPermission("SYSTEM_ACCESS.READONLY");
+//echo "PortalUserID: [".$objSession->Get("PortalUserId")."]<br>";
+//echo "PermSet: [".$has_perm."]<br>";
 
-
-if( ! $objSession->HasSystemPermission("SYSTEM_ACCESS.READONLY") )
+if( !$has_perm )
 {
 
 	/* category Edit */
@@ -2161,4 +2172,6 @@
 		echo "<b>USER HAS RO-ACCESS</b> on action [<b>".$_REQUEST['Action']."</b>]<br>";
 }
 
+//echo "==== END ==== <br>";
+
 ?>