When I crate a Wholesale account in CS-CART Professional, I disable everything in privileges, I allow only VIEW REPORTS. And when I login with a wholesale account I can see only this:
Top 10 Customers
Top 10 Categories
Top 10 Products
Payment Methods
BUT when I click to Top 10 Customers, I can click to any user and modify his account. This should not happen right?