Possible for a non-Super to remove Super from a Super

[jeremy-farrance]

Seen it happen, but need to prove it. If bad, the problem is prolly line 268 in Controllers/UserManageController.cs. Weird thing is a non-Super shouldn't be able to edit a Super, right? Or?

This
userInfo.IsSuperUser = currentUser.IsSuperUser ? user.IsSuperUser : false;

Should prolly be this, but tersed

            if (currentUser.IsSuperUser)
            {
                userInfo.IsSuperUser = user.IsSuperUser;
            }
            else
            {
                // nop
            }

[jeremy-farrance]

Similar issue on .IsDeleted? It looks like an alread IsDeleted user, when edited by a non-Super will un-delete the user on save.